Threats affecting pkg:github/sonirico/mcp-shell

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 1.0%	CVE-2025-61489mcp-shell · A Command Injection Medium6.5EPSS 1.0%2026-01-07CVE Database V5CVE-2025-61489 A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string. EPSS 1.0%Vulnerability CWE-77	CVE Database V5	2026-01-07

Page 1 of 1