EUVD-2023-31737

Malicious code in bioql PyPI...

EUVD-2023-2412

Malicious code in bioql PyPI...

EUVD-2024-39650

Malicious code in bioql PyPI...

EUVD-2022-1967

Malicious code in bioql PyPI...

EUVD-2021-29347

Malicious code in bioql PyPI...

EUVD-2023-0909

Malicious code in bioql PyPI...

EUVD-2022-52273

Malicious code in bioql PyPI...

EUVD-2023-43239

Malicious code in bioql PyPI...

EUVD-2023-44758

Malicious code in bioql PyPI...

EUVD-2021-29067

Malicious code in bioql PyPI...

EUVD-2025-18907

Malicious code in bioql PyPI...

EUVD-2025-19644

Malicious code in bioql PyPI...

EUVD-2025-19665

Malicious code in bioql PyPI...

EUVD-2025-11013

Malicious code in bioql PyPI...

EUVD-2023-45271

Malicious code in bioql PyPI...

EUVD-2024-51635

Malicious code in bioql PyPI...

EUVD-2023-49515

Malicious code in bioql PyPI...

GHSA-GXW4-4FC5-9GR5 figma-developer-mcp vulnerable to command injection in get_figma_data tool

Summary A command injection vulnerability exists in the figma-developer-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote...

PT-2025-40046

Summary A command injection vulnerability exists in the figma-developer-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child process.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote...

PT-2025-40054

Name of the Vulnerable Software and Affected Versions Framelink Figma MCP Server versions prior to 0.6.3 Figma-developer-mcp versions prior to 0.6.3 Description A command injection flaw exists in the Framelink Figma MCP Server, allowing an unauthenticated remote attacker to execute arbitrary...