aws-serverless-mcp-server vulnerabilities

CVEs whose affected-version data names the aws-serverless-mcp-server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116635Medium· 6.1

3d ago

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the co…

▾ SunlitAWS · aws-serverless-mcp-serverEPSS 0.31%via CVEORG