Executive brief
Duplicate Advisory: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools
Affected products
- npm knowns
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2026-09-08
Technologies: knowns (npm). Vendors: npm.
Duplicate Advisory: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools