FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

py-mkdocs-material -- DOM XSS vulnerability

Affected packages
	py311-mkdocs-material	<	9.7.7
	py312-mkdocs-material	<	9.7.7
	py313-mkdocs-material	<	9.7.7
	py313t-mkdocs-material	<	9.7.7
	py314-mkdocs-material	<	9.7.7
	py314t-mkdocs-material	<	9.7.7
	py315-mkdocs-material	<	9.7.7

Details

VuXML ID	1976b049-8ccc-11f1-b333-901b0edee044
Discovery	2026-07-17
Entry	2026-07-31

Martin Donath reports:

Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature. A crafted q URL parameter could execute JavaScript in the documentation site's origin after user interaction.

[source]

References

URL	https://github.com/squidfunk/mkdocs-material/security/advisories/GHSA-xvg9-69gf-fjrf