Lucene search
+L

1 matches found

Veracode
Veracode
added 2025/07/18 5:54 a.m.12 views

Command Injection

@sunwood-ai-labs/github-kanban-mcp-server is vulnerable to command injection. The vulnerability is due to the use of the unsafe exec API with untrusted user input in the addcomment tool, which allows an attacker to execute arbitrary system commands through crafted input...

9.3CVSS7.5AI score0.01287EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder