EUVD-2026-54789

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

CVE-2026-19288 astralisone rive-mcp-server-core importRiveFile Flow importRiveFile.ts path traversal

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...

MINI-3JR3-5VXX-VW87

Bulletin has no description...

MINI-8JFF-4J5H-QFFR

Bulletin has no description...

MINI-FH82-JQWG-9XPH

Bulletin has no description...

MINI-PCQM-8W2J-MQJM

Bulletin has no description...

MINI-J94X-5CF7-79F2

Bulletin has no description...

MINI-C79G-7MGJ-VQV5

Bulletin has no description...

EUVD-2026-54788

A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the component HistoryService. This manipulation of the argument ID causes path traversal. The attack needs to be launched locally. The project was informed of the problem early through...

MINI-7H9Q-VCWW-5P2M

Bulletin has no description...

MINI-26V7-3QPJ-MMRQ

Bulletin has no description...

MINI-3XHV-C53F-V2J3

Bulletin has no description...

MINI-XXXX-6F7R-X43R

Bulletin has no description...

MINI-XMV5-MQPW-WV38

Bulletin has no description...

MINI-6X65-G7GV-F759

Bulletin has no description...

MINI-CPG9-M2W9-F7F5

Bulletin has no description...

MINI-2FC5-5W56-2X5W

Bulletin has no description...

MINI-9P75-9JV7-64J6

Bulletin has no description...

MINI-7FR9-C98P-7J33

Bulletin has no description...

CVE-2026-19284

A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...