Mcp Ui Probe
Approved changes feed: RSS · Atom
cpe:2.3:a:hulupeep:mcp-ui-probe:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hulupeep (1c4cb9f2-05aa-598e-9a2b-4238a0ea5fb5) |
|---|---|
| Product | Mcp Ui Probe (6048f5f2-1efd-5aa2-8bed-9ab9431d4d07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19270 |
vulnerable | 2026-09-16 04:34:15.344195 |
Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal
MEDIUM (5.3)
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path traversal. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-08T07:45:11.576Z
Updated: 2026-08-14T15:51:57.439Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.