@bitbonsai/mcpvault vulnerabilities
CVEs whose affected-version data names the @bitbonsai/mcpvault package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-9c83-rr99-vfwjMediumMCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
▾ Sunlitbitbonsai · @bitbonsai/mcpvaultvia GHSA
GHSA-j99q-93c9-h869MediumMCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
▾ Sunlitbitbonsai · @bitbonsai/mcpvaultvia GHSA