Skip to content
OpenAdvisories

Package · npm

mcp-package-docs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2025-54073 EPSS 11%

    mcp-package-docs vulnerable to command injection in several tools

    mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol (LSP) capabilities. A command injection vulnerability exists in the…

    sammcj mcp-package-docs mcp-package-docs npm