@bitbonsai/mcpvault vulnerabilities (npm)

2 vulnerabilities.

• @bitbonsai/mcpvault npm MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested CVE-2026-57442 Fix available 6.9 MediumJune 19, 2026
• @bitbonsai/mcpvault npm MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence CVE-2026-57441 Fix available 8.4 HighJune 18, 2026