eiceblue vulnerabilities

Products

• spire-doc-mcp-server 1
• spire-pdf-mcp-server 1

Latest eiceblue CVEs

Newest publication first

1. CVE-2026-7315 eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversal

   Published 2026-04-28

   Medium·CVSS 6.9 EPSS 0.41%

   A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function get_pdf_path of the file src/spire_pdf_mcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched...

2. CVE-2026-7314 eiceblue spire-doc-mcp-server base.py get_doc_path path traversal

   Published 2026-04-28

   Medium·CVSS 6.9 EPSS 0.41%

   A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function get_doc_path of the file src/spire_doc_mcp/api/base.py. Performing a manipulation of the argument document_name results in path traversal. The attack can be initiated remotely. The expl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.