Lucene search
+L

1 matches found

Veracode
Veracode
•added 2025/07/18 5:54 a.m.•27 views

Command Injection

@sunwood-ai-labs/github-kanban-mcp-server is vulnerable to command injection. The vulnerability is due to the use of the unsafe exec API with untrusted user input in the addcomment tool, which allows an attacker to execute arbitrary system commands through crafted input...

9.3CVSS6.8AI score0.0138EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder