knowns vulnerabilities (npm)

2 vulnerabilities.

• knowns npm knowns before 0.30.0 Arbitrary Code Execution via LSP Binary CVE-2026-86540 Fix available 8.5 HighSeptember 7, 2026
• knowns npm knowns before 0.30.0 Path Traversal via MCP doc and memory tools CVE-2026-86439 Fix available 8.7 HighSeptember 7, 2026