CVE-2026-55557
1 advisory.
npm/browse-mcp CVE-2026-55557: high, EPSS 0.24%
browse-mcp has an arbitrary file write via unconfined download and state paths
Action: Upgrade browse-mcp to 0.8.2 or later.
npm i browse-mcp@0.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.2 | - |
Fixed versions
| 0.8.2 |
Sources
- osv: GHSA-m9mq-7m7q-xc6p
- https://github.com/That1Drifter/browse-mcp/security/advisories/GHSA-m9mq-7m7q-xc6p
- https://github.com/That1Drifter/browse-mcp/pull/58
- https://github.com/That1Drifter/browse-mcp/commit/5352a4a56f626254b445bfa07e4bb48c5aad15c1
- https://github.com/That1Drifter/browse-mcp
- https://github.com/That1Drifter/browse-mcp/blob/v0.8.2/CHANGELOG.md#082---2026-06-13
- https://github.com/That1Drifter/browse-mcp/releases/tag/v0.8.2
CVE-2026-55557 · published · modified · JSON