npm/@profullstack/mcp-server: critical 9.8
@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.4.12 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-v6wj-c83f-v46x
- https://github.com/profullstack/mcp-server/security/advisories/GHSA-v6wj-c83f-v46x
- https://github.com/profullstack/mcp-server
published · modified · JSON