wong2 vulnerabilities

Products

• @wong2/mcp-cli 1

Latest wong2 CVEs

Newest publication first

1. CVE-2025-9262 wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection

   Published 2025-08-20

   Medium·CVSS 6.3 EPSS 3.7%

   A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.