CVE-2026-19323

MEDIUM 5.3

azer react-analyzer-mcp analyze-projec index.ts generateProjectDocs path traversal

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is the function generateProjectDocs of the file src/index.ts of the component analyze-projec. The manipulation of the argument projectName results in path traversal. The attack is only possible with local access. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-22
Vendor	azer
Product	react-analyzer-mcp
Published	Aug 9, 2026

Stay Ahead of the Next One

Get instant alerts for azer react-analyzer-mcp

Be the first to know when new medium vulnerabilities affecting azer react-analyzer-mcp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

azer / react-analyzer-mcp

335f2a3585f265e2e88352b59b10d3b478d678b0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/387157 vuldb.com: https://vuldb.com/vuln/387157/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19323 vuldb.com: https://vuldb.com/submit/865240 github.com: https://github.com/azer/react-analyzer-mcp/issues/3 github.com: https://github.com/azer/react-analyzer-mcp/

Credits

🔍 gongyanyu03 (VulDB User) VulDB CNA Team