Skip to content
OpenAdvisories

Package · npm

@aiondadotcom/mcp-ssh

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-p4h8-56qp-hpgv

    SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

    ## Impact A crafted `hostAlias` argument such as `-oProxyCommand=...` was passed to `ssh`/`scp` without an argument terminator. SSH interprets arguments starting with `-` as options regardless of position, so the option-injection caused SSH to execute the att…

    @aiondadotcom/mcp-ssh npm