Skip to content
OpenAdvisories

Package · npm

@akoskm/create-mcp-server-stdio

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2025-54994

    @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API

    @akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool d…

    akoskm create-mcp-server-stdio @akoskm/create-mcp-server-stdio npm