Bitbonsai vulnerabilities
We track 1 vulnerability in Bitbonsai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest Bitbonsai vulnerabilities
- 8.4 High severity
mcpvault: Improper Resolution of Path Equivalence
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem