Skip to content
OpenAdvisories

Package · npm

@wonderwhy-er/desktop-commander

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-10691

    wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos

    A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This impacts an unknown function of the file src/search-manager.ts of the component start_search. Performing a manipulation of the argument SearchResult[] results in ineffic…

    wonderwhy-er DesktopCommanderMCP @wonderwhy-er/desktop-commander npm
  • Medium 6.3
    CVE-2026-10690

    wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery

    A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37. This affects the function readFileFromUrl of the file src/tools/filesystem.ts of the component read_file. Such manipulation of the argument url leads to server-side request forgery. Th…

    wonderwhy-er DesktopCommanderMCP @wonderwhy-er/desktop-commander npm