cyanheads

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

cyanheads records in CISA KEV

No cyanheads vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-58751 CVE-2026-85626 · GHSA-p58h-f635-vjjm

git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters

HIGH 77

git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00476 Published 2026-09-04 No fix listed CWE-88

TI-2025-33100 CVE-2025-53107 · GHSA-3q26-f695-pp76

@cyanheads/git-mcp-server vulnerable to command injection in several tools

HIGH 74

@cyanheads/git-mcp-server is an MCP server designed to interact with Git repositories.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.24536 Published 2025-07-01 Fixed in 2.1.5 CWE-77

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0