Skip to content
OpenAdvisories

Package · npm

@cyanheads/git-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2025-53107 EPSS 25%

    @cyanheads/git-mcp-server vulnerable to command injection in several tools

    @cyanheads/git-mcp-server is an MCP server designed to interact with Git repositories. Prior to version 2.1.5, there is a command injection vulnerability caused by the unsanitized use of input parameters within a call to child_process.exec, enabling an attack…

    cyanheads git-mcp-server @cyanheads/git-mcp-server npm