Repository navigation
Security: modelcontextprotocol/servers
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
server-filesystem: `move_file`'s same-device rename leaves the source unpinned — a swapped source parent moves an outside file into the allowed directories, where it becomes readableGHSA-7m4x-rv66-mxhh published
Nov 11, 2026 by cliffhallModerate -
mcp-server-fetch: IPv6 site-local fec0::/10 classified as public (SSRF guard classifier gap, CWE-918)GHSA-3rxj-6jhw-qfv7 published
Nov 11, 2026 by cliffhallLow -
mcp-server-git: arbitrary command execution via a repository's own Git configuration (core.fsmonitor) during read-only toolsGHSA-6hqx-gqrx-c5r2 published
Nov 11, 2026 by cliffhallHigh -
mcp-server-fetch: robots.txt path-canonicalization bypass (e.g. //private fetched while Disallow: /private)GHSA-f9hh-cmx9-2f23 published
Nov 11, 2026 by cliffhallLow -
mcp-server-git: Incomplete Fix for GHSA-w766-5x43-whvw in validate_opened_repo() Allows --repository Confinement Bypass via objects/info/alternates and Linked-Worktree common_dir ConfusionGHSA-q74p-4wrc-q7w6 published
Nov 11, 2026 by cliffhallModerate -
Symlink swap after validation lets read_text_file return files outside allowedDirectoriesGHSA-p9cv-8g75-4xcg published
Nov 11, 2026 by cliffhallModerate -
mcp-server-git: nested gitdir file bypasses --repository confinementGHSA-w766-5x43-whvw published
Oct 28, 2026 by cliffhallModerate -
robots.txt enforcement bypass via HTTP redirects in mcp-server-fetchGHSA-3jqg-r5pp-rmp2 published
Oct 25, 2026 by cliffhallLow -
Case-variant path bypasses symlink check and allows creating files outside allowed directories in server-filesystemGHSA-4gxg-m5jx-9j57 published
Oct 25, 2026 by cliffhallModerate -
Path traversal via trailing quote/whitespace in validatePath (Check/Use Mismatch)GHSA-7rgq-gccq-qphx published
Oct 25, 2026 by cliffhallModerate