Threats affecting pkg:github/toowiredd/chatgpt-mcp-server

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 1.5%	CVE-2026-7061Toowiredd chatgpt-mcp-server · OS Command Injection Medium6.9EPSS 1.5%2026-04-26CVE Database V5CVE-2026-7061 CVE-2026-7061 is an OS command injection vulnerability in Toowiredd chatgpt-mcp-server version 0.1.0. It affects an unknown functionality within the src/services/docker.service.ts file of the MCP/HTTP component. This vulnerability allows remote attackers to execute arbitrary OS commands. The issue was reported early to the project, but no response or fix has been provided yet. The exploit code is publicly available, increasing the risk of exploitation. The CVSS 4. EPSS 1.5%Vulnerability	CVE Database V5	2026-04-26

Page 1 of 1