Gongyanyu03

**Name of the Vulnerable Software and Affected Versions** angrysky56 advanced-reasoning-mcp version 1.0.0 **Description** A path traversal issue exists in the file `src/index.ts` within the functions `create system json()`, `create library()`, `get system json()`, and `switch memory library()`. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the intended folder. Exploiting this issue requires local access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the functions `create system json()`, `create library()`, `get system json()`, and `switch memory library()` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** azer react-analyzer-mcp versions up to 335f2a3585f265e2e88352b59b10d3b478d678b0 **Description** A path traversal flaw exists in the `analyze-projec` component within the `generateProjectDocs()` function located in the `src/index.ts` file. This issue occurs when the `projectName` argument is manipulated, allowing an attacker with local access to access files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated. **Recommendations** As a temporary workaround, restrict the use of the `projectName` argument in the `generateProjectDocs()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HelloGGX shadcn-vue-mcp versions up to e170e277b94235cde627803277fc8c41103a4d38 **Description** A path traversal issue exists in the `fs.promises.readFile()` function within the `src/server/callback-server.ts` file. This occurs when the `filepath` argument is manipulated, allowing for unauthorized file access. Exploitation of this issue is restricted to local execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IncomeStreamSurfer roo-code-memory-bank-mcp-server versions up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e **Description** A path traversal issue exists in the `read memory bank file/append memory bank entry` component within the `src/index.ts` file. The flaw occurs in the `readMemoryBankFile()` and `appendMemoryBankEntry()` functions when the `file name` argument is manipulated. This allows a local attacker to access or modify files outside the intended directory. Path traversal is a vulnerability that allows an attacker to use special characters, such as dot-dot-slash (../), to navigate the file system beyond the restricted folder. **Recommendations** As a temporary workaround, restrict the use of the `readMemoryBankFile()` and `appendMemoryBankEntry()` functions until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jevon-Zhong Ai-doctor version 0.0.1 **Description** A path traversal issue exists in the `deleteImage()` function within the `ai-doctor-server/src/filemanagement/filemanagement.service.ts` file. This occurs when the `imagePath` argument is manipulated, allowing a local attacker to access or delete files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder. **Recommendations** As a temporary workaround, restrict access to the `deleteImage()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** abracadabra50 claude-sesh version 1.0.0 **Description** A flaw in the `enrichSession` function within `getEnrichedData` (located in the `src/services/enricher.ts` file) allows for path traversal. This occurs when the `sessionId` argument is manipulated. Path traversal is a technique used to access files and directories that are stored outside the web root folder. This issue requires the attack to be launched locally. **Recommendations** Apply patch 786c9d74800e6d0858b65778f31beb71b3983a50 for version 1.0.0.

**Name of the Vulnerable Software and Affected Versions** aktsmm skill-ninja-mcp-server version 0.1.0 **Description** Local manipulation of the `workspacePath` argument in the `getInstalledSkills()`, `installSkill()`, `updateAgentsMd()`, and `uninstallSkill()` functions within the `src/installer.ts` file allows for path traversal. Path traversal is a condition where an attacker can access files or directories outside the intended folder by using special characters in a file path. **Recommendations** Update to version 0.1.1.

**Name of the Vulnerable Software and Affected Versions** andreahaku codex mcp versions up to 1ff521cc6cc57cfe56ddef946c644b8534771390 **Description** Command injection is possible in the ask MCP Tool component within the file src/codex-process-simple.ts. The issue occurs when the `model` argument is manipulated, allowing an attacker with local access to execute arbitrary commands. **Recommendations** Update andreahaku codex mcp to a version later than 1ff521cc6cc57cfe56ddef946c644b8534771390. As a temporary mitigation, restrict local access to the ask MCP Tool component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** astralisone rive-mcp-server-core versions up to db1d0cc4cd52589116360428b7504fd0ca748b3e **Description** A path traversal issue exists in the importRiveFile Flow component within the file packages/mcp-server/src/tools/importRiveFile.ts. A local attacker can exploit this by manipulating the `libraryId` argument. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.