Skip to content
OpenAdvisories

Product · DeDeveloper23

codebase-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-5023

    DeDeveloper23 codebase-mcp RepoMix codebase.ts saveCodebase os command injection

    A vulnerability has been found in DeDeveloper23 codebase-mcp up to 3ec749d237dd8eabbeef48657cf917275792fde6. This vulnerability affects the function getCodebase/getRemoteCodebase/saveCodebase of the file src/tools/codebase.ts of the component RepoMix Command …

    DeDeveloper23 codebase-mcp