Skip to content
OpenAdvisories

Package · npm

@rog0x/mcp-git-tools

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-106764

    @rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function

    An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.

    @rog0x/mcp-git-tools npm