Threats affecting pkg:github/pv-bhat/gemsuite-mcp

CVE-2026-19368 is a path traversal vulnerability in PV-Bhat gemsuite-mcp version 1.0.0. It affects an unknown functionality in the file src/handlers/unified-gemini.ts related to components gemini_search, gemini_reason, gemini_process, and gemini_analyze. The vulnerability allows local attackers with low privileges to manipulate file path arguments to perform path traversal. No patch or vendor response has been reported yet.