kaggle-mcp vulnerabilities
1 known vulnerability in kaggle-mcp from Dexhunter. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest first
- 7.3 High severity
kaggle-mcp: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function prepare_kaggle_dataset of the file src/kaggle_mcp/server.py. The manipulation of the argument competition_id leads to