build1 distinct publisher
Four MCP path-traversal CVEs slipped past a scanner rule scoped to file reads
The author of mcpscan checked rule MCP007 against the year's four MCP path-traversal CVEs, found its sink regex only matched read calls, and closed the gap by adding write sinks that escalate to HIGH on sight.
Publishers:dev.to
Reality
- Evidence46
- Adoption12
- Hype gap+24
- Incentives60