VYPR

shadcn-vue-mcp

by HelloGGX

CVEs (1)

  • CVE-2026-19324LowAug 9, 2026
    risk 0.21cvss 3.3epss

    A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file src/server/callback-server.ts. This manipulation of the argument filepath causes path traversal. The…