Threats affecting pkg:github/c-rick/jimeng-mcp

CVE-2026-9473 is a path traversal vulnerability in c-rick jimeng-mcp version 1.10.0. It affects multiple functions in the src/api.ts file, where manipulation of the filePath argument can lead to unauthorized file access. The vulnerability can be exploited remotely without user interaction and has been publicly disclosed. The vendor has not yet responded or provided a fix. The CVSS 4.0 base score is 5.3, indicating a medium severity level.