Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gc2j-wpjv-jhrw

Опубликовано: 02 мая 2026
Источник: github
Github: Прошло ревью
CVSS4: 5.5
CVSS3: 6.5

Описание

sublinear-time-solver has a Path Traversal Issue

A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_state of the file src/consciousness-explorer/mcp/server.js of the component MCP Interface. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Пакеты

Наименование

sublinear-time-solver

npm
Затронутые версииВерсия исправления

<= 1.5.0

Отсутствует

EPSS

Процентиль: 38%
0.00462
Низкий

5.5 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
3 месяца назад

A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_state of the file src/consciousness-explorer/mcp/server.js of the component MCP Interface. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 38%
0.00462
Низкий

5.5 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-22