Skip to content
OpenAdvisories

Vendor

kazuph

2 known vulnerabilities.

Products

mcp-fetch 1 mcp-docs-rag 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-5007

    kazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository os command injection

    A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component add_git_repository/add_text_file. The manipulation leads to os command injection. The attack needs to be perf…

    kazuph mcp-docs-rag