Description
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @justice8096/sagemath-mcp-server | <= 1.0.1 | — | GHSA-2vq3-mpmf-9xgr |