Skip to content
OpenAdvisories

Vendor

privsim

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    privsim mcp-test-runner MCP index.ts child_process.spawn os command injection

    A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_process.spawn of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument command can lead to os command injection. The attac…