Threats tagged 'ghsa-q6jf-24jf-m3cg'

A high-severity information disclosure vulnerability exists in Aspire CLI versions 13.2.0 through 13.6.4 on Linux and macOS platforms. The issue arises from insecure temporary files used by the Aspire CLI's deprecated MCP configuration scanner, which can expose sensitive configuration information to local attackers on shared temporary directories. The vulnerability is fixed in version 13.6.5.