Threats affecting pkg:github/zachhandley/ZMCPTools

CVE-2026-7445 is a path traversal vulnerability in ZachHandley ZMCPTools versions up to 0.2.2. The issue exists in the MCP Log Resource Handler component, specifically in the file src/managers/ResourceManager.ts, where manipulation of the dirname argument allows unauthorized path traversal. This vulnerability can be exploited remotely. The vulnerability has been publicly disclosed, but the vendor has not yet responded or provided a fix.