Threats tagged 'ghsa-cfv3-8v68-p29q'

A command injection vulnerability exists in the runCodeReviewTool function of the src/tools/codeReview.ts file in kleneway awesome-cursor-mpc-server versions up to 2.0.1. This flaw allows remote attackers to execute arbitrary commands. The vulnerability has a CVSS score of 6.3 (medium severity). An exploit has been published, but the project has not yet issued a fix or patch.