Threats tagged 'ghsa-rgqf-fgw4-cmhv'

CVE-2026-19330 is a path traversal vulnerability in angrysky56 advanced-reasoning-mcp version 1.0.0. It affects functions in the src/index.ts file, specifically create_system_json, create_library, get_system_json, and switch_memory_library. Exploitation requires local access. The project has been notified but has not yet responded or issued a fix. The vulnerability has a CVSS score of 5.3, indicating a low severity level.