npm/@aiondadotcom/mcp-ssh: high

SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

Action: Upgrade @aiondadotcom/mcp-ssh to 1.3.5 or later.

npm i @aiondadotcom/mcp-ssh@1.3.5

Affected

Fixed versions

Sources

• osv: GHSA-p4h8-56qp-hpgv
• https://github.com/AiondaDotCom/mcp-ssh/security/advisories/GHSA-p4h8-56qp-hpgv
• https://github.com/AiondaDotCom/mcp-ssh/issues/9
• https://github.com/AiondaDotCom/mcp-ssh
• https://github.com/AiondaDotCom/mcp-ssh/releases/tag/1.3.5

published 2026-04-14T00:04:10Z · modified 2026-04-14T00:28:04.463444Z · JSON