Approved changes feed: RSS · Atom

cpe:2.3:a:azer:react-analyzer-mcp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAzer (188abd57-096d-5dd8-ad2c-6bc9ba59ea22)
ProductReact Analyzer Mcp (c129c248-16da-5996-bf49-af1c91620ad9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19323 vulnerable 2026-09-16 04:34:15.715284 azer react-analyzer-mcp analyze-projec index.ts generateProjectDocs path traversal
MEDIUM (5.3)
A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is the function generateProjectDocs of the file src/index.ts of the component analyze-projec. The manipulation of the argument projectName results in path traversal. The attack is only possible with local access. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-09T00:00:13.313Z
Updated: 2026-08-10T21:12:48.635Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.