Skip to content
OpenAdvisories

Vendor

serverless

1 known vulnerabilities.

Products

serverless 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-69256 Public exploit

    serverless MCP Server vulnerable to command injection in list-projects tool

    The Serverless Framework is a framework for using AWS Lambda and other managed cloud services to build applications. Starting in version 4.29.0 and prior to version 4.29.3, a command injection vulnerability exists in the Serverless Framework's built-in MCP se…

    serverless serverless serverless npm