Skip to content

@modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling

High severity GitHub Reviewed Published Jul 1, 2025 in modelcontextprotocol/servers • Updated Jul 2, 2025

No open alerts for this advisory

Give feedback on Dependabot alerts