{"action":"Upgrade mcp-ssh-tool to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"mcp-ssh-tool","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-j7h9-2jh7-g967","id":"tcs_01M5KFX9BNQY5SKNNCNHTVSGSZ","modified_at":"2026-05-21T05:15:08.446595569Z","published_at":"2026-05-07T21:45:16Z","references":["https://osv.dev/vulnerability/GHSA-j7h9-2jh7-g967","https://github.com/oaslananka/mcp-ssh-tool/security/advisories/GHSA-j7h9-2jh7-g967","https://github.com/oaslananka/mcp-ssh-tool"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-j7h9-2jh7-g967","url":"https://osv.dev/vulnerability/GHSA-j7h9-2jh7-g967"}],"summary":"mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening"}