Threats tagged 'ghsa-xgwr-j735-3wg4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.2%	CVE-2026-19336Pimzino spec-workflow-mcp · Path Traversal Medium4.8EPSS 0.2%2026-08-09GCVE DatabaseCVE-2026-19336 A path traversal vulnerability exists in Pimzino spec-workflow-mcp versions up to 2.2.6 in the ApprovalStorage.createApproval function. The issue arises from manipulation of the categoryName argument, allowing local attackers to perform path traversal. This vulnerability has a medium severity score of 5.3 and is fixed in version 2.2.7. EPSS 0.2%Report on CVE-2026-19336 Vulnerability CWE-22 #ghsa-xgwr-j735-3wg4	GCVE Database	2026-08-09

Page 1 of 1