Threats tagged 'ghsa-46jg-c454-8hm3'

A path traversal vulnerability exists in the IncomeStreamSurfer roo-code-memory-bank-mcp-server component, specifically in the functions readMemoryBankFile and appendMemoryBankEntry. The issue arises from improper handling of the file_name argument, allowing local attackers to manipulate file paths. The product uses a rolling release system, so specific affected versions are not disclosed. No patch or vendor response is currently available. The vulnerability has a CVSS score of 5.3, indicating a low severity level.