Repository navigation
Security: modelcontextprotocol/servers
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Path traversal in git_add allows staging files outside repository boundaries in mcp-server-gitGHSA-vjqx-cfc4-9h6v published
Feb 25, 2026 by jenn-newtonModerate -
Unrestricted git_init tool allows repository creation at arbitrary filesystem locations in mcp-server-gitGHSA-5cgr-j3jf-jw3v published
Dec 17, 2025 by pcarletonModerate -
Argument injection in git_diff and git_checkout functions for mcp-server-git allows overwriting local filesGHSA-9xwc-hfwc-8w59 published
Dec 17, 2025 by pcarletonModerate -
Missing path validation when using --repository flag in mcp-server-gitGHSA-j22h-9j4x-23w5 published
Dec 17, 2025 by pcarletonModerate -
Path validation bypass via colliding path prefixGHSA-hc55-p739-j48w published
Jul 1, 2025 by dsp-antHigh -
Path validation bypass via symlink handlingGHSA-q66q-fx2p-7w4m published
Jul 1, 2025 by dsp-antHigh