cyanheads git-mcp-server

• CVE-2026-85626 High 7.5 git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters 0.5%
• CVE-2025-53107 High 7.5 @cyanheads/git-mcp-server vulnerable to command injection in several tools 24.5%