Snyk Security Database

mcp-server-rijksmuseum is a

Affected versions of this package are vulnerable to Arbitrary Command Injection via the open_image_in_browser() function. An attacker can execute arbitrary operating system commands by manipulating the imageUrl argument remotely.

pipecat-ai is an An open source framework for voice (and multimodal) assistants

Affected versions of this package are vulnerable to Directory Traversal via the download_file() function in the GET /files/{filename:path} endpoint when the process is started with the --folder flag. An attacker can access arbitrary files readable by the process by sending specially crafted HTTP requests containing percent-encoded path separators in the filename parameter.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the email notification template system. An attacker can inject arbitrary HTML content by supplying crafted values in device, geofence, or driver name fields, which are then rendered in notification emails sent to other users, potentially leading to phishing or spoofed email content.