ChromeDevTools chrome-devtools-mcp

• CVE-2026-53765 Medium 6.1 chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory 0.1%
• CVE-2026-53766 Medium 6.1 chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots 0.1%