EUVD-2026-67588

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

CVE-2026-81485

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

pnpm fs.statSync readFileSync unauthorized access

The vulnerability of the fs.statSync and fs.readFileSync functions in the pnpm package manager’s script store/cafs/src/addFilesFromDir.ts is related to an incorrect definition of references before accessing files. Exploiting this vulnerability could allow an attacker to gain unauthorized access t...

PT-2024-32016 · Unknown · Simple-Spellchecker

Name of the Vulnerable Software and Affected Versions: Simple-Spellchecker version 1.0.2 Description: An issue in the readFileSync function allows attackers to read arbitrary files via a directory traversal. This issue affects the readFileSync function, enabling attackers to read any file...

VulnCheck KEV: CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

Jan path traversal vulnerability

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

EUVD-2024-1932

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857: Path Traversal: 'dir\..\..\filename'

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

PT-2024-27182

Name of the Vulnerable Software and Affected Versions Jan version 0.4.12 Description The issue is related to an arbitrary file read vulnerability. This vulnerability can be exploited via the "/v1/app/readFileSync" API endpoint. Recommendations For Jan version 0.4.12, as a temporary workaround,...