100 matches found
CVE-2026-69152 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opentelemetry-auto-instrumentations-node, opensearch-dashboards, prism, langfuse, nextcloud-server, unleash-proxy, sqlpad, authentik-fips, wazuh-dashboard, gitlab-rails-ce, renovate, foxx-cli, kubeflow-katib, arangodb, vitess, authentik,...
GHSA-5V2H-R2CX-5XGJ vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-RRRM-QJM4-V8HF vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2022-21680 vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2022-21681 vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-XWCQ-PM8M-C4VF vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2023-46233 vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2026-48978 vulnerabilities
Vulnerabilities for packages: gogatekeeper, cert-manager-cmctl, kyverno-notation-aws, trivy-fips, helm, kubescape-server, trivy-operator, kube-arangodb-fips, chaos-mesh-fips, conftest, ocm-kubernetes-controller-fips, headlamp-fips, ratify-fips, zarf-fips, teleport, zarf, ratify, kyverno,...
GHSA-XF85-363P-868W vulnerabilities
Vulnerabilities for packages: gogatekeeper, cert-manager-cmctl, kyverno-notation-aws, trivy-fips, helm, kubescape-server, trivy-operator, kube-arangodb-fips, chaos-mesh-fips, conftest, ocm-kubernetes-controller-fips, headlamp-fips, ratify-fips, zarf-fips, teleport, zarf, ratify, kyverno,...
GHSA-67HX-6X53-JW92 vulnerabilities
Vulnerabilities for packages: awx, arangodb...
CVE-2023-45133 vulnerabilities
Vulnerabilities for packages: awx, arangodb...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: spire-server, flux-source-controller-fips, telegraf, gitea, trivy-fips, helm, kubescape-server, vault-fips, trivy-operator, external-dns, kube-arangodb-fips, gitlab-workhorse-ce, etcd-fips, chisel-fips, harbor-fips, frankenphp-8.2, frankenphp-8.3, zarf-fips,...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: amazon-ecs-agent-fips, trivy-fips, helm, kubescape-server, trivy-operator, kube-arangodb-fips, chaos-mesh-fips, headlamp-fips, k8sgpt, spegel-fips, zarf-fips, teleport, zarf, docker-cli-buildx-fips, kubescape-server-fips, manifest-tool, google-osconfig-agent,...
CVE-2026-7715
A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arangobackup of the file src/tools.ts of the component MCP Interface. Such manipulation of the argument outputDir leads to path traversal. It is possible to launch the attack remotely. The explo...
EUVD-2026-26866
A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arangobackup of the file src/tools.ts of the component MCP Interface. Such manipulation of the argument outputDir leads to path traversal. It is possible to launch the attack remotely. The explo...
CVE-2026-7715
Technical details are not publicly available in the provided documents. Monitor for updates from the project and CVE entry.
CVE-2026-7715 ravenwits mcp-server-arangodb MCP tools.ts arango_backup path traversal
A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arangobackup of the file src/tools.ts of the component MCP Interface. Such manipulation of the argument outputDir leads to path traversal. It is possible to launch the attack remotely. The explo...
CVE-2026-7715
A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arangobackup of the file src/tools.ts of the component MCP Interface. Such manipulation of the argument outputDir leads to path traversal. It is possible to launch the attack remotely. The explo...
PT-2026-36743
Name of the Vulnerable Software and Affected Versions ravenwits mcp-server-arangodb versions prior to 0.4.8 Description A path traversal issue exists in the MCP Interface component within the arango backup function of the src/tools.ts file. A remote attacker can manipulate the outputDir argument ...