Threats affecting pkg:brew/chrome-devtools-mcp

A vulnerability in chrome-devtools-mcp versions 0.24.0 up to but not including 1.1.0 allows bypassing workspace root path restrictions via symbolic links. The validatePath() function does not canonicalize symlinks before enforcing root directory constraints, enabling an attacker to read or write files outside the intended workspace boundaries through symlink traversal. This issue is fixed in version 1.1.0.

A vulnerability in chrome-devtools-mcp versions from 0.20.0 up to but not including 1.1.0 allows a local low-privilege user to exploit a symlink attack on the daemon PID file in the /tmp fallback runtime directory. This occurs because the daemon writes its PID file without using the O_NOFOLLOW flag, enabling truncation of arbitrary writable files via symlink. The issue is fixed in version 1.1.0.