MCP server exposing local filesystem read/write tools.
MCP server exposing shell commands as tools.
MCP server for headless browser control.
| ID | Severity | Title | AI Score | Found | Status |
|---|---|---|---|---|---|
| ZDS-2025-0139 | CRITICAL9.4 | Path traversal in tool/read_file allows host FS read EPSS 91%POC NOKEVEXPLOITED NOW CWE-22· 1 affected | 96 | 4d ago | DISCLOSED |
| ZDS-2025-0137 | HIGH7.4 | Prompt-injectable cookie exfiltration EPSS 67%POC NONO-KEVNOT EXPLOITED CWE-200· 1 affected | 89 | 8d ago | EMBARGOED |
| ZDS-2025-0128 | CRITICAL9.9 | Unbounded shell tool with no allowlist EPSS 92%POC NONO-KEVEXPLOITED NOW CWE-78· 1 affected | 92 | 26d ago | DISCLOSED |