chrome-devtools-mcp vulnerabilities (npm)

2 vulnerabilities.

• chrome-devtools-mcp npm chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots CVE-2026-53766 Fix available 6.1 MediumJune 24, 2026
• chrome-devtools-mcp npm chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory CVE-2026-53765 Fix available 6.1 MediumJune 17, 2026