npm/sublinear-time-solver CVE-2026-55609: high 7.1, EPSS 0.17%

consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write

Action: Upgrade sublinear-time-solver to 1.6.0 or later.

npm i sublinear-time-solver@1.6.0

Affected

Fixed versions

Sources

• osv: GHSA-xc9g-j69q-37xw#npm/sublinear-time-solver
• https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw
• https://github.com/BruceJqs/public_exp/issues/32
• https://github.com/ruvnet/sublinear-time-solver/issues/19
• https://github.com/ruvnet/sublinear-time-solver/pull/20
• https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229
• https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a
• https://github.com/ruvnet/sublinear-time-solver
• https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0

CVE-2026-55609 · published 2026-08-25T18:35:32Z · modified 2026-08-26T00:55:48.151532960Z · JSON