54yyyu
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| code-mcp | 2 | – | May 5, 2026 |
| zotero-mcp | 1 | – | Oct 10, 2026 |
Exploited and recent CVEs
- CVE-2026-108583 zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool 0.2%
- CVE-2026-7812 54yyyu code-mcp MCP Tool server.py git_operation command injection 1.5%
- CVE-2026-7811 54yyyu code-mcp MCP File server.py is_safe_path path traversal 0.4%