Threats tagged 'ghsa-5r3x-hrv2-fg58'

CVE-2026-19368 is a path traversal vulnerability in PV-Bhat gemsuite-mcp version 1.0.0. It affects an unknown functionality in the file src/handlers/unified-gemini.ts related to components gemini_search, gemini_reason, gemini_process, and gemini_analyze. The vulnerability allows local attackers with low privileges to manipulate file path arguments to perform path traversal. No patch or vendor response has been reported yet.