CVE Vulnerability Catalog

A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66, in the component generate_types. Manipulation of the argument schema results in command injection. The attack needs to be approached locally. The project was informed but has not responded.

A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0, in the component run_openlane/view_waveform. Manipulation of the argument design_name/vcd_file leads to command injection. Local access is required. The project was informed but has not responded.

A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0, in the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed but has not responded.

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0, in the function create_system_json/create_library to get_system_json/switch_memory_library of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed but has not responded.

A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390, in an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. Manipulation of the argument model results in command injection. The attack requires a local approach. This product does not use versioning, so no version details are available. The project was informed but has not responded.

A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0, in the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. Manipulation of the argument workspacePath leads to path traversal. The attack needs to be performed locally. Upgrading to version 0.1.1 is recommended to address this issue. The patch identifier is 855b46739e0f6e8388f17f9d0066ac4298a3965d.

A flaw has been found in abracadabra50 claude-sesh 1.0.0, in the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is called 786c9d74800e6d0858b65778f31beb71b3983a50. Applying a patch is advised to resolve this issue.

A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1, in the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Manipulation of the argument imagePath results in path traversal. The attack must be initiated from a local position. The project was informed but has not responded.

A vulnerability has been detected in the roo-code-memory-bank-mcp-server up to version 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. It affects the readMemoryBankFile/appendMemoryBankEntry function in src/index.ts, where manipulation of the file_name argument leads to path traversal. The attack requires local access.

A vulnerability has been discovered in react-analyzer-mcp up to version 335f2a3585f265e2e88352b59b10d3b478d678b0. The affected function is generateProjectDocs in src/index.ts, where manipulation of the projectName argument results in path traversal. The attack is only possible with local access.

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion with a name or description containing a malicious Vue expression, which is executed in the victim's browser. The vulnerability allows arbitrary JavaScript execution in the application's security context.

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to path traversal. The attack needs to be performed locally. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the component HistoryService. This manipulation of the argument ID causes path traversal. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.

A weakness has been identified in andreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture of the file src/autolearn/GitHooksManager.ts of the component llm_memory_mcp. Executing a manipulation of the argument hash can lead to command injection. The attack is restricted to local execution. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack is only possible with local access. The project was informed of the problem early through an issue report but has not responded yet.

In the MIMICLab mcp-pdf-vision project version 1.1.0, a command injection vulnerability was found in the load_pdf function in src/index.ts. Manipulating the pdfPath/sessionId arguments allows command execution, but the attack requires local access. The project has not responded to the report.

In the Hulupeep mcp-ui-probe project up to version 0.2.0, a path traversal vulnerability was found in the get_journey/delete_journey/analyze_journey/usage_stats functions in src/journey/JourneyStorage.ts of the Journey/Usage component. Manipulating the journeyId/filename arguments allows access to files outside the allowed directory. The attack requires local access.

In the abdullah1854 MCPGateway project up to commit 549f494a9e363f40530149de324b8097de424230, a command injection vulnerability was found in the getUsageByDateRange function in src/services/claude-usage.ts of the Claude Usage Range Endpoint component. Manipulating the since argument allows remote command execution. The exploit is publicly available.