1 matches found
Command Injection
@sunwood-ai-labs/github-kanban-mcp-server is vulnerable to command injection. The vulnerability is due to the use of the unsafe exec API with untrusted user input in the addcomment tool, which allows an attacker to execute arbitrary system commands through crafted input...
9.3CVSS6.8AI score0.0138EPSS
SaveExploits0References6Affected Software1
20