TI-2026-76780 CVE-2026-113378 · GHSA-qq9r-r4m4-c72m
Command injection in mcollina mcp-ripgrep Advanced Search Tool
Priority MEDIUM 55
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0.
mcollina
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
mcollina records in CISA KEVNo mcollina vulnerabilities are listed in CISA KEV.
Records
8 records
TI-2026-69605 CVE-2026-107302 · GHSA-8f34-f56x-9xph
Truncated map32 headers throw RangeError in msgpack5 decoder
Priority LOW 39
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69603 CVE-2026-107300 · GHSA-5x5g-h9x8-2fh9
msgpack5 streaming decoder recursion can exhaust the call stack
Priority LOW 39
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69599 CVE-2026-107298 · GHSA-24ch-f2g6-9hhh
Deeply nested input exhausts the stack in msgpack5 decoder
Priority LOW 30
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69606 CVE-2026-107301 · GHSA-8hq7-ggx2-cc6m
Prototype pollution in msgpack5 with partial options
Priority LOW 29
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69609 CVE-2026-107297 · GHSA-gcx5-hxj7-gpqq
Quadratic parsing in msgpack5 streaming decoder blocks the event loop
Priority LOW 27
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69600 CVE-2026-107299 · GHSA-26wq-p25c-j6fv
Reserved byte in msgpack5 causes unbounded stream buffering
Priority LOW 27
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69613 CVE-2026-107296 · GHSA-qw35-55vc-rhgj
msgpack5 decoding modifies the input buffer for negative int64 values
Priority LOW 17
msgpack5 is a msgpack v5 implementation for node.js and the browser.