CVE-2025-68145
2 advisories.
PyPI/mcp-server-git CVE-2025-68145: medium
mcp-server-git has missing path validation when using --repository flag
Action: Upgrade mcp-server-git to 2025.12.18 or later.
pip install mcp-server-git==2025.12.18Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.12.18 | - |
Fixed versions
| 2025.12.18 |
Sources
- osv: GHSA-j22h-9j4x-23w5
- https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-j22h-9j4x-23w5
- https://nvd.nist.gov/vuln/detail/CVE-2025-68145
- https://github.com/modelcontextprotocol/servers
CVE-2025-68145 · published · modified · JSON
PyPI/mcp-server-git CVE-2025-68145: unknown
mcp-server-git has missing path validation when using --repository flag
Action: Upgrade mcp-server-git to 2025.12.18 or later.
pip install mcp-server-git==2025.12.18Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.12.18 | - |
Fixed versions
| 2025.12.18 |
Sources
- osv: PYSEC-2026-1623
- https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-j22h-9j4x-23w5
- https://nvd.nist.gov/vuln/detail/CVE-2025-68145
- https://github.com/modelcontextprotocol/servers
- https://pypi.org/project/mcp-server-git
- https://github.com/advisories/GHSA-j22h-9j4x-23w5
CVE-2025-68145 · published · modified · JSON