Threats tagged 'ghsa-x7p6-m57g-xh3q'

CVE-2026-7628 is a command injection vulnerability in crazyrabbitLTC mcp-code-review-server versions up to 0.1.0. It affects the executeRepomix function in the src/repomix.ts file of the RepoMix Command Handler component. The vulnerability allows remote attackers to execute arbitrary commands by manipulating input to this function. Public exploit code is available, and the project has not yet issued a fix or response.