PT-2025-30308 · Unknown · @Translated/Lara-Mcp

Name of the Vulnerable Software and Affected Versions: @translated/lara-mcp versions 0.0.11 and below Description: A command injection vulnerability exists in the @translated/lara-mcp MCP Server due to the unsanitized use of input parameters within a call to child process.exec. Successful...