CVE-2025-53818
1 advisory.
npm/@sunwood-ai-labs/github-kanban-mcp-server CVE-2025-53818: high
GitHub Kanban MCP Server vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.3.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6jx8-rcjx-vmwf
- https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/security/advisories/GHSA-6jx8-rcjx-vmwf
- https://nvd.nist.gov/vuln/detail/CVE-2025-53818
- https://github.com/Sunwood-ai-labs/github-kanban-mcp-server
- https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/blob/main/src/handlers/comment-handlers.ts#L8
- https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/blob/main/src/handlers/tool-handlers.ts#L79
- https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/blob/v0.4.0/src/handlers/comment-handlers.ts#L8-L23
CVE-2025-53818 · published · modified · JSON