isaacwasserman vulnerabilities

Products

• mcp-vegalite-server 1

Latest isaacwasserman CVEs

Newest publication first

1. CVE-2026-1977 isaacwasserman mcp-vegalite-server visualize_data eval code injection

   Published 2026-02-06

   Medium·CVSS 5.3 EPSS 0.27%

   A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval of the component visualize_data. Such manipulation of the argument vegalite_specification leads to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.