Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
claude-faf-mcp
claude-faf-mcp vulnerabilities (npm)
1 vulnerability.
claude-faf-mcp
npm
claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
GHSA-rr55-jp92-8wp2
Fix available
7.5
High
August 19, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open