@modelcontextprotocol servers

• CVE-2026-27735 Medium 6.4 mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries 0.3%
• CVE-2025-68145 Medium 6.4 mcp-server-git has missing path validation when using --repository flag 7.0%
• CVE-2025-68144 Medium 6.3 mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files 7.2%
• CVE-2025-68143 Medium 6.5 mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations 8.1%
• CVE-2025-53109 High 7.3 Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handling 0.8%
• CVE-2025-53110 High 7.3 Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix 0.6%