CVE-2025-10619

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the...

CVE-2025-10619

The CVE-2025-10619 flaw affects sequa-ai sequa-mcp up to version 1.0.13, related to the redirectToAuthorization function in src/helpers/node-oauth-client-provider.ts of the OAuth Server Discovery component. It enables OS command injection via manipulation of unvalidated/non-sequa URLs, enabling r...

PT-2025-38278

Name of the Vulnerable Software and Affected Versions: sequa-ai sequa-mcp versions prior to 1.0.14 Description: A vulnerability exists in the redirectToAuthorization function within the OAuth Server Discovery component, specifically in the file src/helpers/node-oauth-client-provider.ts...