EUVD-2026-53927

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...

CVE-2026-19041

The CVE-2026-19041 entry impacts MissionSquad mcp-api up to version 1.11.8. The vulnerability resides in the function this.packageService.installPackage within src/controllers/packages.ts (NPM Package Version Handler) and enables command injection. Exploit appears possible remotely, with a remedi...

CVE-2026-19040

MissionSquad mcp-api (versions

CVE-2026-19040 MissionSquad mcp-api dcrClients.ts server-side request forgery

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to...