Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the code-generation process and MCP management interface. An attacker can execute arbitrary operating system commands by injecting attacker-controlled Go source code through the POST /autoCode/addFunc endpoint and...