Skip to main content

Vendor/product archive

lfprojects / model_context_protocol_servers CVEs

Beta · best-effort

4 CVEs tagged to lfprojects / model_context_protocol_servers0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

CVE-2026-27735

Published Feb 26, 2026

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2026.1.14, the git_add tool d…

CVSS 6.4 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2025-68145

Published Dec 17, 2025

In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate tha…

CVSS 6.4 · Medium
evidence mentions
3
Buzz score
25.4
Vendor/product tagsBeta · best-effort

CVE-2025-68144

Published Dec 17, 2025

In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-li…

CVSS 6.3 · Medium
evidence mentions
3
Buzz score
25.4
Vendor/product tagsBeta · best-effort

CVE-2025-68143

Published Dec 17, 2025

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2025.9.25, the git_init tool…

CVSS 6.5 · Medium
evidence mentions
3
Buzz score
25.4
Vendor/product tagsBeta · best-effort
Showing 1-4 of 4 CVEsPage 1 of 1