Search results

[Security] Path traversal via symlink - FS_BASE_DIRECTORY bypass

Status: Open.

#16 In cyanheads/filesystem-mcp-server;

· xylove21 opened on May 6, 2026

[Security] Symlink boundary bypass, unrestricted setDefault, and ReDoS in updateFile

Status: Open.

#15 In cyanheads/filesystem-mcp-server;

· jdhart81 opened on Feb 28, 2026

Sandboxing is too restrictive

Status: Open.

#13 In cyanheads/filesystem-mcp-server;

· rf-eggnine opened on Nov 20, 2025

jsonwebtoken 9.0.9 does not support RS256 algorithm

Status: Open.

#11 In cyanheads/filesystem-mcp-server;

· rf-eggnine opened on Nov 18, 2025

@google/genai does not appear to be used

Status: Open.

#10 In cyanheads/filesystem-mcp-server;

· rf-eggnine opened on Nov 18, 2025

npm audit reported vulnerabilities

Status: Open.

#9 In cyanheads/filesystem-mcp-server;

· rf-eggnine opened on Nov 18, 2025

Could not start the proxy McpError: MCP error -32001: Request timed out

Status: Open.

#8 In cyanheads/filesystem-mcp-server;

· shaaraddalvi opened on Nov 4, 2025

FS_BASE_DIRECTORY not respected

Status: Open.

#3 In cyanheads/filesystem-mcp-server;

· mjp0 opened on May 22, 2025