browse-mcp vulnerabilities

CVEs whose affected-version data names the browse-mcp package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55557High

4w ago

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download writes a fetched response body to join(save_dir, filename) without validating the caller-controlled save_dir, while bro…

▾ Twilightbrowse-mcp · browse-mcpEPSS 0.19%via NVD