Eiceblue vulnerabilities
We track 2 vulnerabilities in Eiceblue products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Eiceblue vulnerabilities
- 7.3 High severity
spire-pdf-mcp-server: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function get_pdf_path of the file src/spire_pdf_mcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The at
- 7.3 High severity
spire-doc-mcp-server: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function get_doc_path of the file src/spire_doc_mcp/api/base.py. Performing a manipulation of the argument document_name results in path traversal. The attack can be initiate