CVE-2026-19338: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

PT-2026-69279

Name of the Vulnerable Software and Affected Versions automateyournetwork MCPyATS versions prior to 0.1.5 Description A path traversal issue exists in the generate mermaid markdown component within the processGenerateRequest function located in the mcp servers/mermaid/index.ts file. A local...