Threats affecting pkg:github/drhelius/Gearboy

CVE-2026-61542 is a vulnerability in drhelius Gearboy emulator version prior to 3.8.7 where the optional MCP HTTP server mode accepts unauthenticated requests from any network peer. This allows remote peers to invoke emulator and debugging operations without authentication, potentially affecting the emulator process, debugging state, and local files used as media. The vulnerability is patched in Gearboy 3.8.7.