Framelink Figma MCP Server

• CVE-2025-15061 Critical 9.8 Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability 2.2%
• CVE-2025-53967 High 8.0 Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that 6.1%