{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.13.0"}],"component":"@wong2/mcp-cli","cve_ids":["CVE-2025-9262"],"ecosystem":"npm","epss":0.04294,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p6rm-483j-37jf","id":"tcs_01M5KG2SRFHG4Z7X620VBE27G0","modified_at":"2025-09-13T04:47:33Z","published_at":"2025-08-21T00:30:20Z","references":["https://osv.dev/vulnerability/GHSA-p6rm-483j-37jf","https://nvd.nist.gov/vuln/detail/CVE-2025-9262","https://github.com/wong2/mcp-cli/pull/16","https://github.com/wong2/mcp-cli/commit/35629664cc5d3aea4c3d083d075fe26e7c346b59","https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e","https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e#proof-of-concept","https://github.com/wong2/mcp-cli","https://vuldb.com/?ctiid.320804","https://vuldb.com/?id.320804","https://vuldb.com/?submit.631697"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-p6rm-483j-37jf","url":"https://osv.dev/vulnerability/GHSA-p6rm-483j-37jf"}],"summary":"wong2 mcp-cli Command Injection Vulnerability"}