Cyanheads Git-Mcp-Server
2 CVEs affecting Cyanheads Git-Mcp-Server. Latest disclosed: 2026-09-04. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-85626 | High | 7.5 | 2026-09-04 | git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-… |
CVE-2025-53107 | High | 7.5 | 2025-07-01 | @cyanheads/git-mcp-server is an MCP server designed to interact with Git repositories. Prior to version 2.1.5, there is a command injection vulnerability cause… |