sigmade vulnerabilities

Products

• Git-MCP-Server 1

Latest sigmade CVEs

Newest publication first

1. CVE-2026-4496 sigmade Git-MCP-Server gitUtils.ts child_process.exec os command injection

   Published 2026-03-20

   Medium·CVSS 4.8 EPSS 1.1%

   A vulnerability was found in sigmade Git-MCP-Server up to 785aa159f262a02d5791a5d8a8e13c507ac42880. Affected by this vulnerability is the function child_process.exec of the file src/gitUtils.ts of the component show_merge_diff/quick_merge_summary/show_file_diff. The manipulation...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.