{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.18"}],"component":"@puchunjie/doc-tools-mcp","cve_ids":["CVE-2026-7738"],"ecosystem":"npm","epss":0.00425,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-gcmm-c94j-j47x","id":"tcs_01M5KFRC4HBWVHFJDQ0RT13XFD","modified_at":"2026-05-08T17:11:28.662613Z","published_at":"2026-05-04T09:31:09Z","references":["https://osv.dev/vulnerability/GHSA-gcmm-c94j-j47x","https://nvd.nist.gov/vuln/detail/CVE-2026-7738","https://github.com/BruceJqs/public_exp/issues/38","https://github.com/puchunjie/doc-tools-mcp/issues/4","https://github.com/puchunjie/doc-tools-mcp","https://vuldb.com/submit/807642","https://vuldb.com/vuln/360913","https://vuldb.com/vuln/360913/cti"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-gcmm-c94j-j47x","url":"https://osv.dev/vulnerability/GHSA-gcmm-c94j-j47x"}],"summary":"@puchunjie/doc-tools-mcp has a Path Traversal Issue"}