missionsquad mcp-api vulnerabilities

Latest missionsquad mcp-api CVEs

Newest publication first

1. CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

   Published 2026-08-06

   Medium·CVSS 5.3 EPSS 2.1%

   A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is po...

2. CVE-2026-19040 MissionSquad mcp-api dcrClients.ts server-side request forgery

   Published 2026-08-06

   Medium·CVSS 5.3 EPSS 0.30%

   A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.