{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.1"}],"component":"mcp-server-taskwarrior","cve_ids":["CVE-2026-5833"],"ecosystem":"npm","epss":0.0074,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-95hg-3c55-xf9x","id":"tcs_01M5KFEWM24T7N4HGBYXE3EV70","modified_at":"2026-04-10T19:41:26.479194Z","published_at":"2026-04-09T06:30:27Z","references":["https://osv.dev/vulnerability/GHSA-95hg-3c55-xf9x","https://nvd.nist.gov/vuln/detail/CVE-2026-5833","https://github.com/awwaiid/mcp-server-taskwarrior/issues/8","https://github.com/awwaiid/mcp-server-taskwarrior/issues/8#issuecomment-4139402095","https://github.com/awwaiid/mcp-server-taskwarrior/commit/1ee3d282debfa0a99afeb41d22c4b2fd5a3148f2","https://github.com/awwaiid/mcp-server-taskwarrior","https://github.com/user-attachments/files/25923228/mcp-server-taskwarrior_bug.pdf","https://vuldb.com/submit/789810","https://vuldb.com/vuln/356289","https://vuldb.com/vuln/356289/cti"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-95hg-3c55-xf9x","url":"https://osv.dev/vulnerability/GHSA-95hg-3c55-xf9x"}],"summary":"awwaiid mcp-server-taskwarrior vulnerable to command injection"}