All products

chrome-devtools-mcp

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing rootsCVE-2026-53766 · GHSA-8QF9-62X2-82PP chrome-devtools-mcp npm Medium Fix reported
Chrome DevTools for agents: daemon.pid write follows symlinks in /tmp fallback runtime directoryCVE-2026-53765 · GHSA-3PVJ-JV98-QHJQ chrome-devtools-mcp npm Medium Fix reported