Threats tagged 'ghsa-3p62-p8gh-rh2w'

A path traversal vulnerability exists in the is_safe_path function of src/code_mcp/server.py in the MCP File Handler component of 54yyyu code-mcp. This flaw allows remote attackers to manipulate file paths, potentially accessing unauthorized files. The vulnerability is publicly disclosed with exploit code available. The project uses rolling releases, so specific affected and fixed versions are not provided. The CVSS score is 7.3, indicating high severity.