cosmicstack-labs mercury-agent

• CVE-2026-90814 Medium 6.3 cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery 0.4%
• CVE-2026-90813 Medium 4.3 cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize 0.6%
• CVE-2026-90812 Medium 4.3 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment 0.4%
• CVE-2026-90811 Low 3.3 cosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure 0.1%
• CVE-2026-90810 Medium 6.3 cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization 0.4%
• CVE-2026-18998 Medium 6.3 cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization 0.4%
• CVE-2026-18997 Medium 6.3 cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization 0.4%
• CVE-2026-18996 Medium 6.3 cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment 0.4%