Threats tagged 'ghsa-xm38-q6p9-jrgg'

A path traversal vulnerability exists in Ichigo3766 image-gen-mcp version 0.1.0 in an unknown function within src/index.ts related to the upscale_images component. The vulnerability allows local attackers with low privileges to manipulate the output_path argument to perform path traversal. The issue was reported early to the project but has not yet received a response or fix.