Skip to content
OpenAdvisories

Vendor

MissionSquad

2 known vulnerabilities.

Products

mcp-api 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-19041

    MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

    A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to comman…

    MissionSquad mcp-api
  • Medium 6.3
    CVE-2026-19040

    MissionSquad mcp-api dcrClients.ts server-side request forgery

    A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgradin…

    MissionSquad mcp-api