Threats tagged 'ghsa-m4mw-6cr3-7cc7'

A path traversal vulnerability exists in UsamaK98 python-notebook-mcp affecting functions in server.py, allowing remote attackers to manipulate file paths. The flaw impacts create_notebook, read_notebook, edit_cell, and add_cell functions. Exploit code has been published. The project uses a rolling release model, so no specific affected or fixed versions are available. The vendor has been notified but has not yet responded.