TI-2026-76780 CVE-2026-113378 · GHSA-qq9r-r4m4-c72m
Command injection in mcollina mcp-ripgrep Advanced Search Tool
Priority MEDIUM 55
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0.
Vulnerabilities
8 records
TI-2026-69605 CVE-2026-107302 · GHSA-8f34-f56x-9xph
Truncated map32 headers throw RangeError in msgpack5 decoder
Priority LOW 39
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69606 CVE-2026-107301 · GHSA-8hq7-ggx2-cc6m
Prototype pollution in msgpack5 with partial options
Priority LOW 29
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69603 CVE-2026-107300 · GHSA-5x5g-h9x8-2fh9
msgpack5 streaming decoder recursion can exhaust the call stack
Priority LOW 39
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69600 CVE-2026-107299 · GHSA-26wq-p25c-j6fv
Reserved byte in msgpack5 causes unbounded stream buffering
Priority LOW 27
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69599 CVE-2026-107298 · GHSA-24ch-f2g6-9hhh
Deeply nested input exhausts the stack in msgpack5 decoder
Priority LOW 30
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69609 CVE-2026-107297 · GHSA-gcx5-hxj7-gpqq
Quadratic parsing in msgpack5 streaming decoder blocks the event loop
Priority LOW 27
msgpack5 is a msgpack v5 implementation for node.js and the browser.
TI-2026-69613 CVE-2026-107296 · GHSA-qw35-55vc-rhgj
msgpack5 decoding modifies the input buffer for negative int64 values
Priority LOW 17
msgpack5 is a msgpack v5 implementation for node.js and the browser.