Arbitrary Command Injection

Overview @sequa-ai/sequa-mcp is an A proxy for the Model Context Protocol MCP that connects local STDIO with remote MCP servers Affected versions of this package are vulnerable to Arbitrary Command Injection via the redirectToAuthorization function in the OAuth Server Discovery component. An...