Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-cc2g-gq8c-r332grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools high Not flagged Aug 19, 2026

Versions in the registry

2.2.4 (listed), 2.2.3, 2.2.2, 2.2.1, 2.2.0, 2.1.0, 2.0.0, 1.10.0, 1.9.1, 1.9.0