cyanheads

Products

ProductCVEsExploitedLatest
git-mcp-server2–Sep 4, 2026

Exploited and recent CVEs

  • CVE-2026-85626 High 7.5 git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters 0.5%
  • CVE-2025-53107 High 7.5 @cyanheads/git-mcp-server vulnerable to command injection in several tools 24.5%