Skip to content

Product

54yyyu code-mcp vulnerabilities

2 published CVES affecting 54yyyu code-mcp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest 54yyyu code-mcp CVEs

Newest publication first

  1. CVE-2026-7812 54yyyu code-mcp MCP Tool server.py git_operation command injection

    Published
    MediumCVSS 6.9 EPSS 1.5%

    A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the function git_operation of the file src/code_mcp/server.py of the component MCP Tool. Performing a manipulation of the argument operation results in command inj...

  2. CVE-2026-7811 54yyyu code-mcp MCP File server.py is_safe_path path traversal

    Published
    MediumCVSS 6.9 EPSS 0.42%

    A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The affected element is the function is_safe_path of the file src/code_mcp/server.py of the component MCP File Handler. Such manipulation leads to path traversal. It is possible to l...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.