Threat database

zotero-mcp versions 0.10.0 through 0.14.1 contain a server-side request forgery (SSRF) vulnerability. This flaw allows attackers to manipulate the _fetch_embedded_metadata function to fetch URLs without validating the destination, potentially accessing internal services. Attackers can use prompt injection to trigger zotero_add_by_url, causing requests to internal or link-local hosts, which may leak citation metadata and error information. The vulnerability has a low severity score and no known exploits in the wild.

A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the function git_operation of the file src/code_mcp/server.py of the component MCP Tool. Performing a manipulation of the argument operation results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-7811 is a path traversal vulnerability in the 54yyyu code-mcp project affecting the is_safe_path function in src/code_mcp/server.py. This vulnerability allows remote attackers to manipulate file paths, potentially accessing unauthorized files. The vulnerability has been publicly disclosed, but the vendor has not yet responded or provided a fix. The project uses rolling releases, so specific affected or fixed versions are not clearly identified. The CVSS 4.0 score rates this issue as medium severity (6.9).