Skip to content
OpenAdvisories

Vendor

Klarso

1 known vulnerabilities.

Products

neo-mjs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-18482

    CVE-2026-18482

    Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values int…

    Klarso neo-mjs