{"action":"Upgrade mcp-maigret to 1.0.13 or later.","affected":[{"fixed":"1.0.13","introduced":"0"}],"component":"mcp-maigret","cve_ids":["CVE-2026-2130"],"ecosystem":"npm","epss":0.01985,"exploited":false,"fixed_versions":["1.0.13"],"ghsa_id":"GHSA-2g7v-hghf-grg4","id":"tcs_01M5KET0SEJJZWWGNMETEK4XPG","modified_at":"2026-02-10T00:41:26.086621Z","published_at":"2026-02-08T03:30:27Z","references":["https://osv.dev/vulnerability/GHSA-2g7v-hghf-grg4","https://nvd.nist.gov/vuln/detail/CVE-2026-2130","https://github.com/BurtTheCoder/mcp-maigret/issues/9","https://github.com/BurtTheCoder/mcp-maigret/pull/10","https://github.com/BurtTheCoder/mcp-maigret/commit/b1ae073c4b3e789ab8de36dc6ca8111ae9399e7a","https://github.com/BurtTheCoder/mcp-maigret","https://github.com/BurtTheCoder/mcp-maigret/releases/tag/v1.0.13","https://vuldb.com/?ctiid.344765","https://vuldb.com/?id.344765","https://vuldb.com/?submit.747171"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-2g7v-hghf-grg4","url":"https://osv.dev/vulnerability/GHSA-2g7v-hghf-grg4"}],"summary":"mcp-maigret vulnerable to command injection"}