A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is the function execute of the file mastergo/component-workflow.md of the component mcp__getComponentGenerator. The manipulation of the argument rootPath leads to path traversal. An attack has to be approached locally. The vulnerability requires local access and has a low CVSS score of 1.9. D [truncated]
A weakness was identified in mastergo-design mastergo-magic-mcp up to 0.2.0, impacting the function z.string of the file src/tools/get-component-link.ts of the component mcp__getComponentLink. This weakness can lead to server-side request forgery when manipulating the argument url. The attack may be performed remotely. The exploit has been made public and could be used for attacks. However, the project ha [truncated]
