That1Drifter vulnerabilities
We track 1 vulnerability in That1Drifter products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest That1Drifter vulnerabilities
- 8.6 High severity
browse-mcp: Improper Limitation of a Pathname to a Restricted Directory
browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download writes a fetched response body to join(save_dir, filename) without validating the caller-controlled save_dir, while browser_save_state and bro