Threats tagged 'ghsa-c8c4-xf97-vvc8'

A command injection vulnerability exists in INQUIRELAB mcp-bridge-api in the mcp-bridge.js file's Servers Endpoint component. The flaw arises from manipulation of the command/args argument, allowing remote attackers to execute arbitrary commands. The product uses a rolling release model, so no specific affected or fixed versions are available. A fix has been proposed but not yet accepted.