Threats tagged 'ghsa-pcgr-7p2p-x7w8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 2.1%	CVE-2026-19041MissionSquad mcp-api · Injection Medium5.3EPSS 2.1%2026-08-06GCVE DatabaseCVE-2026-19041 A command injection vulnerability exists in MissionSquad mcp-api versions up to 1.11.8 in the function this.packageService.installPackage within src/controllers/packages.ts. This vulnerability allows remote attackers to execute arbitrary commands. Upgrading to version 1.11.9 resolves the issue. EPSS 2.1%Report on CVE-2026-19041 Vulnerability CWE-74 #ghsa-pcgr-7p2p-x7w8	GCVE Database	2026-08-06

Page 1 of 1