spire-doc-mcp-server vulnerabilities
1 known vulnerability in spire-doc-mcp-server from Eiceblue. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest first
- 7.3 High severity
spire-doc-mcp-server: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function get_doc_path of the file src/spire_doc_mcp/api/base.py. Performing a manipulation of the argument document_name results in path traversal. The attack can be initiate