Skip to content
OpenAdvisories

Package · npm

gemini-mcp-tool

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability

    gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool. Authentication is not required to exploit this vulnerability. T…