EUVD-2025-19730

Malicious code in bioql PyPI...

CVE-2025-53110 Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix

Model Context Protocol Servers is a collection of reference implementations for the model context protocol MCP. Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 0.6.4 o...

CVE-2025-53110

CVE-2025-53110 affects Model Context Protocol Servers (Filesystem MCP Server). A path validation bypass allows accessing unintended files when the allowed-directory prefix collides with other paths, prior to versions 0.6.4 or 2025.7.01. The issue enables directory containment bypass and potential...

CVE-2024-50333

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. User input is not validated and is written to the filesystem. The ParserLabel::addLabels function can be used to write attacker-controlled data into the custom language file that will be includ...