Skip to content
OpenAdvisories

Vendor

raine

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    raine consult-llm-mcp server.ts child_process.execSync os command injection

    A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation of the argument git_diff.base_ref/git_diff.files results in os command injecti…