{"items":[{"id":"NVI-00016172","kind":"vulnerability","title":"MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-j99q-93c9-h869","CVE-2026-57441"],"plain_summary":"GitHub lists this reviewed advisory for @bitbonsai/mcpvault. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-38e33b5d7a4405c7cf60a94cdc6ea116"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-38e33b5d7a4405c7cf60a94cdc6ea116","url":"https://github.com/advisories/GHSA-j99q-93c9-h869","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-j99q-93c9-h869","publisher":"GitHub Advisory Database","observed_at":"2026-11-03T22:35:18.117Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-38e33b5d7a4405c7cf60a94cdc6ea116"],"technology":"@bitbonsai/mcpvault","known_exclusions":[],"conditions_summary":"On case-insensitive filesystems (macOS, Windows), PathFilter compiled its deny-list patterns case-sensitively and matched the path verbatim, so names like `.Git/config`, `.GIT/config`, or `.oBsIdIaN/secrets.md` slipped past the `.git`/`.obsidian`/`node_modules` restriction while the OS opened the real file. On Windows, trailing dots/spaces (`.git./config`, `.git /config`) bypassed it the same way. Affects both `isAllowed` (read/write/move/search) and `isAllowedForListing`. Vault-root `..` containment is NOT affected. Fixed in 0.11.4 by case-insensitive matching plus per-segment canonicalization before the deny-list check. Reported privately by novice-22.","public_affected_ranges":["< 0.11.4"]}],"null_published_at":"2026-11-04T10:04:27.901Z","source_updated_at":"2026-07-20T21:30:53.000Z","source_disclosed_at":"2026-06-18T14:30:43.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-03T22:35:18.117Z"}],"next_cursor":null,"snapshot_revision":"42594"}