Handwriting-OCR vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Handwriting-OCR products: 1 record(s), with severity, exploitation and fixes.

Handwriting-ocr-mcp-server 1

Exploited only (KEV) →

CVE-2026-19372 Medium · 5.3 CWE-22 Aug 9, 2026

Handwriting-OCR handwriting-ocr-mcp-server upload_document index.ts fs.readFileSync path traversal

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.