Spire Doc Mcp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:eiceblue:spire-doc-mcp-server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eiceblue (1a6084f4-6cf0-5428-80dc-6f33044fea7f) |
|---|---|
| Product | Spire Doc Mcp Server (a4d288c7-3e4f-5167-9e9c-4ab4a098fed3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7314 |
vulnerable | 2026-06-08 08:08:57.009497 |
eiceblue spire-doc-mcp-server base.py get_doc_path path traversal
HIGH (7.3)
A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function get_doc_path of the file src/spire_doc_mcp/api/base.py. Performing a manipulation of the argument document_name results in path traversal. The attack can be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-04-28T19:45:14.013Z
Updated: 2026-04-29T13:59:04.051Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.