Threats tagged 'ghsa-qwv5-f74g-8p86'

A command injection vulnerability exists in the git_operation function of the src/code_mcp/server.py file in the MCP Tool component of 54yyyu code-mcp. This vulnerability allows remote attackers to manipulate the operation argument to execute arbitrary commands. The vulnerability has a CVSS score of 7.3 (high severity) and public exploit code is available. The project uses continuous delivery with rolling releases, so no specific affected or fixed versions are provided. The project has been informed but has not yet responded or issued a fix.