{"action":"Upgrade @wonderwhy-er/desktop-commander to 0.2.39 or later.","affected":[{"fixed":"0.2.39","introduced":"0"}],"component":"@wonderwhy-er/desktop-commander","cve_ids":["CVE-2026-10691"],"ecosystem":"npm","epss":0.00354,"exploited":false,"fixed_versions":["0.2.39"],"ghsa_id":"GHSA-r87g-78mx-3wg4","id":"tcs_01M5KG8F102Z1SQD661AZW9N6Q","modified_at":"2026-07-10T17:41:40.763012Z","published_at":"2026-06-03T00:30:27Z","references":["https://osv.dev/vulnerability/GHSA-r87g-78mx-3wg4","https://nvd.nist.gov/vuln/detail/CVE-2026-10691","https://github.com/wonderwhy-er/DesktopCommanderMCP/issues/375","https://github.com/wonderwhy-er/DesktopCommanderMCP/pull/400","https://github.com/wonderwhy-er/DesktopCommanderMCP/commit/4ce845f8749b6a159b57b38dcc3357f7222a8078","https://github.com/wonderwhy-er/DesktopCommanderMCP","https://github.com/wonderwhy-er/DesktopCommanderMCP/releases/tag/v0.2.39","https://vuldb.com/cve/CVE-2026-10691","https://vuldb.com/submit/830746","https://vuldb.com/vuln/367960","https://vuldb.com/vuln/367960/cti"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-r87g-78mx-3wg4","url":"https://osv.dev/vulnerability/GHSA-r87g-78mx-3wg4"}],"summary":"DesktopCommanderMCP is vulnerable to Uncontrolled Resource Consumption"}