EUVD-2024-47214

Malicious code in bioql PyPI...

EUVD-2024-54402

Malicious code in bioql PyPI...

EUVD-2024-54406

Malicious code in bioql PyPI...

EUVD-2023-46297

Malicious code in bioql PyPI...

EUVD-2024-54404

Malicious code in bioql PyPI...

EUVD-2024-40155

Malicious code in bioql PyPI...

EUVD-2025-21511

Malicious code in bioql PyPI...

EUVD-2024-47886

Malicious code in bioql PyPI...

EUVD-2024-54537

Malicious code in bioql PyPI...

EUVD-2024-54409

Malicious code in bioql PyPI...

EUVD-2023-38450

Malicious code in bioql PyPI...

EUVD-2024-54536

Malicious code in bioql PyPI...

EUVD-2024-49169

Malicious code in bioql PyPI...

EUVD-2024-42381

Malicious code in bioql PyPI...

EUVD-2024-40639

Malicious code in bioql PyPI...

EUVD-2025-3776

Malicious code in bioql PyPI...

CVE-2025-54994

@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...

Command Injection

Overview @akoskm/create-mcp-server-stdio is a MCP Server Starter kit using the StdioServerTransport Affected versions of this package are vulnerable to Command Injection via the which-app-on-port tool, which executes exec on user input. An attacker can execute arbitrary commands on the host syste...

CVE-2025-54994

CVE-2025-54994 affects the MCP Server Starter kit @akoskm/create-mcp-server-stdio. The vulnerable component is the which-app-on-port tool that uses Node.js child_process.exec, exposing command-injection risk when user input is unsafely concatenated into shell commands. Affected versions precede 0...

CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API

@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...