VYPR

skill-ninja-mcp-server

by Aktsmm

CVEs (1)

  • CVE-2026-19328MedAug 9, 2026
    risk 0.27cvss 5.3epss

    A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to…