ai-sdlc-framework vulnerabilities and threats

An OS command injection vulnerability exists in the ai-sdlc plugin MCP server up to version 0.31.2. This flaw allows attackers with limited privileges to execute arbitrary OS commands by injecting shell metacharacters into the 'repo' argument. The vulnerability arises because the unvalidated 'repo' input is directly interpolated into commands executed via execSync(), specifically 'gh issue view' or 'gh pr view'.