wonderwhy-er DesktopCommanderMCP

• CVE-2026-10691 Medium 4.3 wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos 0.4%
• CVE-2026-10690 Medium 6.3 wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery 0.2%
• CVE-2025-11491 Medium 6.3 wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection 4.3%
• CVE-2025-11490 Medium 6.3 wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection 3.5%
• CVE-2025-11489 Medium 4.5 wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink 0.3%