VYPR

getnote-mcp

by Iswalle

CVEs (1)

  • CVE-2026-82111MedAug 28, 2026
    risk 0.21cvss 4.3epss

    A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload_image. Performing a manipulation of the argument image_path results in path traversal. The attack can be…