Threats tagged 'ghsa-m7hc-392f-p2fg'

CVE-2026-7443 is a vulnerability in BurtTheCoder mcp-dnstwist up to version 1.0.4 affecting the fuzz_domain function in src/index.ts. It allows remote attackers to perform OS command injection via manipulation of the Request argument. The vulnerability has a high severity score of 7.3 and public exploit code is available. The project has been notified but has not yet issued a response or patch.