1043 matches found
EUVD-2024-42381
Malicious code in bioql PyPI...
EUVD-2025-4036
Malicious code in bioql PyPI...
EUVD-2023-46297
Malicious code in bioql PyPI...
EUVD-2022-49632
Malicious code in bioql PyPI...
EUVD-2023-38450
Malicious code in bioql PyPI...
EUVD-2022-51915
Malicious code in bioql PyPI...
EUVD-2024-54536
Malicious code in bioql PyPI...
EUVD-2024-54538
Malicious code in bioql PyPI...
EUVD-2024-54402
Malicious code in bioql PyPI...
EUVD-2024-54404
Malicious code in bioql PyPI...
EUVD-2025-27167
Malicious code in bioql PyPI...
EUVD-2025-12260
Malicious code in bioql PyPI...
EUVD-2025-21511
Malicious code in bioql PyPI...
CVE-2025-54994
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
Command Injection
Overview @akoskm/create-mcp-server-stdio is a MCP Server Starter kit using the StdioServerTransport Affected versions of this package are vulnerable to Command Injection via the which-app-on-port tool, which executes exec on user input. An attacker can execute arbitrary commands on the host syste...
CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
CVE-2025-54994
CVE-2025-54994 affects the MCP Server Starter kit @akoskm/create-mcp-server-stdio. The vulnerable component is the which-app-on-port tool that uses Node.js child_process.exec, exposing command-injection risk when user input is unsafely concatenated into shell commands. Affected versions precede 0...
Malicious code in cloudflare-agent-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 073c16b7f6f9d6ba8d94458e7efa756a07cfcc78cefbda3ed218097358812980 The OpenSSF Package Analysis project identified 'cloudflare-agent-starter' @ 99.99.99 npm as malicious. It is considered malicious because: - Th...
MAL-2025-6880 Malicious code in cloudflare-agent-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 073c16b7f6f9d6ba8d94458e7efa756a07cfcc78cefbda3ed218097358812980 The OpenSSF Package Analysis project identified 'cloudflare-agent-starter' @ 99.99.99 npm as malicious. It is considered malicious because: - Th...