CVE-2025-15061
1 advisory.
npm/figma-developer-mcp CVE-2025-15061, CVE-2025-53967: high 7.5, EPSS 2.18%
figma-developer-mcp vulnerable to command injection in get_figma_data tool
Action: Upgrade figma-developer-mcp to 0.6.3 or later.
npm i figma-developer-mcp@0.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.3 | - |
Fixed versions
| 0.6.3 |
Sources
- osv: GHSA-gxw4-4fc5-9gr5
- https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5
- https://github.com/GLips/Figma-Context-MCP/commit/7f4b5859454b0567c2121ff22c69a0344680b124
- https://github.com/GLips/Figma-Context-MCP
CVE-2025-15061, CVE-2025-53967 · published · modified · JSON