MissionSquad mcp-api

• CVE-2026-19041 Medium 6.3 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection 2.1%
• CVE-2026-19040 Medium 6.3 MissionSquad mcp-api dcrClients.ts server-side request forgery 0.3%