AWS aws-serverless-mcp-server

• CVE-2026-116635 Medium 6.1 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server 0.3%