CVE-2026-19324

HelloGGX shadcn-vue-mcp is affected by a path traversal in fs.promises.readFile within src/server/callback-server.ts. The issue arises from manipulating the filepath argument, enabling local execution. The description notes a rolling release strategy, so specific affected or updated releases cann...