Threats tagged 'ghsa-5pgh-4pr5-mhm8'

A command injection vulnerability exists in the andreahaku codex_mcp project in an unknown function within src/codex-process-simple.ts. The vulnerability arises from improper handling of the argument 'model' and requires local access to exploit. The project does not use versioning, so affected versions cannot be precisely identified. No patch or vendor response has been provided yet.