CVE-2025-45250: Mrdoc

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.

Affected products

• Mrdoc Mrdoc: up to and including 0.95

Published 2025-05-06. Last modified 2026-06-17.