AvinashBole vulnerabilities

Products

• quip-mcp-server 1

Latest AvinashBole CVEs

Newest publication first

1. CVE-2026-4192 AvinashBole quip-mcp-server index.ts setupToolHandlers command injection

   Published 2026-03-15

   Medium·CVSS 5.3

   A vulnerability has been found in AvinashBole quip-mcp-server 1.0.0. Affected by this vulnerability is the function setupToolHandlers of the file src/index.ts. Such manipulation leads to command injection. The attack may be performed from remote. The exploit has been disclosed to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.