EUVD-2021-29347

Malicious code in bioql PyPI...

EUVD-2021-28169

Malicious code in bioql PyPI...

EUVD-2025-26660

Malicious code in bioql PyPI...

EUVD-2025-11013

Malicious code in bioql PyPI...

EUVD-2024-51635

Malicious code in bioql PyPI...

EUVD-2025-1788

Malicious code in bioql PyPI...

EUVD-2023-31737

Malicious code in bioql PyPI...

EUVD-2023-49515

Malicious code in bioql PyPI...

EUVD-2021-29067

Malicious code in bioql PyPI...

EUVD-2022-1967

Malicious code in bioql PyPI...

EUVD-2024-0871

Malicious code in bioql PyPI...

EUVD-2025-21433

Malicious code in bioql PyPI...

EUVD-2025-18907

Malicious code in bioql PyPI...

EUVD-2025-28125

Malicious code in bioql PyPI...

EUVD-2023-2412

Malicious code in bioql PyPI...

EUVD-2025-21432

Malicious code in bioql PyPI...

EUVD-2023-45271

Malicious code in bioql PyPI...

GHSA-GXW4-4FC5-9GR5 figma-developer-mcp vulnerable to command injection in get_figma_data tool

Summary A command injection vulnerability exists in the figma-developer-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote...

PT-2025-40054

Framelink Figma MCP Server and Affected Versions Framelink Figma MCP Server versions prior to 0.6.3 Description The Framelink Figma MCP Server before version 0.6.3 contains a command injection flaw that allows an unauthenticated remote attacker to execute arbitrary operating system commands. This...

PT-2025-40046

Summary A command injection vulnerability exists in the figma-developer-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child process.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote...