CVE-2026-116635

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...

EUVD-2026-115643

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...

CVE-2026-116635

The AWS Serverless MCP Server (aws-serverless-mcp-server) versions prior to v0.2.1 is vulnerable to a path traversal issue in its deployment status component. An actor capable of influencing the MCP agent can exploit this via directory traversal sequences or absolute paths provided in the project...

CVE-2026-116635 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...

CVE-2026-116635: AWS aws-serverless-mcp-server: Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless…

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server aws-serverless-mcp-server before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status...

PT-2026-135825

Name of the Vulnerable Software and Affected Versions AWS Serverless MCP Server versions prior to 0.2.1 Description Improper limitation of a pathname to a restricted directory in the deployment status component allows an actor who can influence the MCP agent to perform directory traversal. By...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes over the /api/v1/chatflows endpoint. A user can gain unauthorized access to and modify sensitive attributes, such as deployment...

Malware in rm-deployment-status-enhancer-tab

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-5821 Malicious code in rm-deployment-status-enhancer-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c5e5770454ab46c88e70de8023cfedded6f5d20f4d7f530c16f9d1362cb2f01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...