VYPR
Vendor

Neomjs

Products
2
CVEs
1
Across products
2
Status
Private

Products

2

Recent CVEs

1
  • CVE-2026-18482CriAug 20, 2026
    risk 0.57cvss 9.8epss 0.02

    Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands,…