Gongyanyu04

**Name of the Vulnerable Software and Affected Versions** bazylhorsey obsidian-mcp-server version 1.0.0 **Description** A path traversal issue exists in the `readCanvas()` and `writeCanvas()` functions within the `src/services/CanvasService.ts` file. This flaw allows a local attacker to access or modify files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths. **Recommendations** As a temporary workaround, consider restricting the use of the `readCanvas()` and `writeCanvas()` functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NellyW8 MCP4EDA version 1.0.0 **Description** Command injection is possible within the `run openlane/view waveform` component. This occurs when the `design name/vcd file` argument is manipulated. Local access is required to execute this attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NightTrek Supabase-MCP (affected versions not specified) **Description** Command injection is possible within the `generate types` component. This occurs when the `schema` argument is manipulated, allowing an attacker with local access to execute arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NightTrek Ollama-mcp versions up to 80cf2e17cfc144963a475b619093a2d13c13dbc9 **Description** A flaw in the file src/index.ts allows for command injection through the manipulation of the `name`, `modelfile`, `source`, or `destination` arguments. This issue can only be exploited by a local attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jane-xiaoer skill-vision-control versions prior to 1.3.1 **Description** A path traversal issue exists in the `getSkillVersionsDir()` function within the `src/svc/utils/config.ts` file. This occurs when the `skillName` argument is manipulated, allowing an attacker to access files or directories outside the intended folder. This attack can only be executed from a local environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `getSkillVersionsDir()` function to prevent unauthorized path manipulation.

**Name of the Vulnerable Software and Affected Versions** Pimzino spec-workflow-mcp versions prior to 2.2.7 **Description** A path traversal issue exists in the `ApprovalStorage.createApproval()` function within the `src/tools/approvals.ts` file. This occurs when the `categoryName` argument is manipulated, allowing an attacker with local access to access files or directories outside the intended folder. **Recommendations** Update to version 2.2.7. As a temporary mitigation, restrict local access to the `ApprovalStorage.createApproval()` function.

**Name of the Vulnerable Software and Affected Versions** adenot mcp-google-search versions prior to 0.3.2 **Description** A server-side request forgery (SSRF) issue exists within the `read webpage` component in the `src/index.ts` file. This occurs when the `url` argument is manipulated, allowing for local execution attacks. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** Apply patch f071d491b685011ca04e8ab8d586fc65f86bcee1 to resolve the issue. As a temporary mitigation, restrict the use of the `url` argument within the `read webpage` component.

**Name of the Vulnerable Software and Affected Versions** automateyournetwork MCPyATS versions prior to 0.1.5 **Description** A path traversal issue exists in the `generate mermaid markdown` component within the `processGenerateRequest()` function located in the `mcp servers/mermaid/index.ts` file. A local attacker can manipulate the `folder/name` argument to access files or directories outside the intended scope. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as filenames and file paths. **Recommendations** Update automateyournetwork MCPyATS to version 0.1.5 or later. As a temporary mitigation, restrict local access to the `processGenerateRequest()` function.

**Name of the Vulnerable Software and Affected Versions** aliyun alibabacloud-dataworks-mcp-server versions prior to 1.0.44 **Description** A security flaw allows remote attackers to perform server-side request forgery (SSRF), a technique where an attacker induces a server to make requests to an unintended location. The issue exists in the `ReadResourceRequestSchema()` function within the `src/resources/initResources.ts` file, triggered by the manipulation of the `request.params.uri` variable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to or avoid using the `ReadResourceRequestSchema()` function.

**Name of the Vulnerable Software and Affected Versions** anubissbe ProjectHub-Mcp versions prior to 5.0.1 **Description** A weakness in the Webhooks API component, specifically within the file `backend-fix/complete backend.js`, allows for server-side request forgery (SSRF). This occurs when the `url` argument is manipulated, enabling remote exploitation to make unauthorized requests from the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the Webhooks API component to minimize the risk of exploitation.