Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:39 p.m.12 views

CVE-2026-7211

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcpserver.py of the component Git Search API. Executing a manipulation of the argument repourl/pattern can lead to command injection. The attack can be executed remotel...

7.5CVSS6.9AI score0.01338EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/28 1:0 a.m.23 views

CVE-2026-7211

CVE-2026-7211 affects the dvladimirov MCP project (up to version 0.1.0) with a vulnerability in the Git Search API. The flaw is exposed in the function GitSearchRequest within mcp_server.py, where manipulating the argument repo_url/pattern can trigger a command injection. The issue is exploitable...

7.5CVSS7.2AI score0.01338EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/04/28 1:0 a.m.7 views

EUVD-2026-25964

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcpserver.py of the component Git Search API. Executing a manipulation of the argument repourl/pattern can lead to command injection. The attack can be executed remotel...

7.5CVSS7.2AI score0.01338EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/28 1:0 a.m.2 views

CVE-2026-7211 dvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcpserver.py of the component Git Search API. Executing a manipulation of the argument repourl/pattern can lead to command injection. The attack can be executed remotel...

7.5CVSS7.1AI score0.01338EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.7 views

PT-2026-35576

Name of the Vulnerable Software and Affected Versions dvladimirov MCP versions prior to 0.1.1 Description A command injection flaw exists in the Git Search API component within the GitSearchRequest function of the mcp server.py file. A remote attacker can execute this by manipulating the repo url...

7.5CVSS7.2AI score0.01338EPSS
SaveExploits0References10
Rows per page
Query Builder