Threats Tagged 'ghsa-629c-j52g-h978'

knowns versions up to 0.33.0 contain a path traversal vulnerability in the code.find MCP tool that allows AI agent sessions to read arbitrary files on the host system outside the intended project directory. This occurs because the path argument is not properly confined to the project root, enabling attackers to supply absolute or relative traversal paths to access sensitive files.