Most recent entries from all

BREW-mkdocs-material-CVE-2026-73295 — Material for MkDocs: DOM XSS in search suggestions via query parameter

2026-10-02T23:51:14.198519+00:00

Affected: Homebrew: mkdocs-material

### Impact

Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional `search.suggest` feature. A crafted `q` URL parameter could execute JavaScript in the documentation site's origin after user interaction.

### Patches

The issue is fixed in Material for MkDocs 9.7.7. Users should upgrade to 9.7.7 or later.

### Workarounds

Sites unable to upgrade should disable the `search.suggest` feature.

CVE-2026-73295 — Material for MkDocs: DOM XSS in search suggestions via query parameter

2026-10-02T23:51:14.198623+00:00

Affected: squidfunk mkdocs-material

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature that allows a crafted q URL parameter to execute JavaScript in a documentation site's origin after user interaction. This issue is fixed in version 9.7.7.

GHSA-xvg9-69gf-fjrf — Material for MkDocs: DOM XSS in search suggestions via query parameter

2026-10-02T23:51:14.198746+00:00

Affected: PyPI: mkdocs-material

### Impact

### Patches

The issue is fixed in Material for MkDocs 9.7.7. Users should upgrade to 9.7.7 or later.

### Workarounds

Sites unable to upgrade should disable the `search.suggest` feature.