Gongyanyu02

**Name of the Vulnerable Software and Affected Versions** INQUIRELAB mcp-bridge-api versions up to b30a82aa1d1d1139e0de846c41c8aadee6e06114 **Description** A command injection issue exists in the Servers Endpoint component within the `mcp-bridge.js` file. A remote attacker can exploit this by manipulating the `command/args` argument, allowing for the execution of arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kirachon context-engine versions prior to 1.9.1 **Description** Command injection is possible within the review-git-diff Endpoint due to improper handling of the `args` variable in the `execGitCommand()` function located in the src/mcp/utils/gitUtils.ts file. Command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the server. **Recommendations** Upgrade to version 1.9.1.

**Name of the Vulnerable Software and Affected Versions** abdullah1854 MCPGateway versions up to 549f494a9e363f40530149de324b8097de424230 **Description** Remote command injection is possible within the Claude Usage Range Endpoint component. The issue exists in the `getUsageByDateRange()` function located in the `src/services/claude-usage.ts` file, where improper handling of the `since` argument allows an attacker to execute arbitrary commands on the system. **Recommendations** As a temporary workaround, restrict access to the `getUsageByDateRange()` function until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hulupeep mcp-ui-probe versions prior to 0.2.1 **Description** A path traversal flaw exists in the Journey/Usage component within the `src/journey/JourneyStorage.ts` file. This issue occurs when the `journeyId` or `filename` arguments are manipulated in the `get journey()`, `delete journey()`, `analyze journey()`, and `usage stats()` functions. Path traversal is a vulnerability that allows an attacker to access files and directories that are stored outside the web root folder. Exploitation of this flaw requires a local approach. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `get journey()`, `delete journey()`, `analyze journey()`, and `usage stats()` functions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MIMICLab mcp-pdf-vision version 1.1.0 **Description** Command injection is possible through the manipulation of the `pdfPath` or `sessionId` arguments within the `load pdf()` function located in the src/index.ts file. This issue allows an attacker to execute arbitrary commands, although the attack is limited to a local environment. **Recommendations** As a temporary workaround, restrict the use of the `load pdf()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** adolfosalasgomez3011 slidev-builder-mcp version 2.1.0 **Description** A command injection flaw exists in the generateAssets Tool within the `generateChart()` function located in the src/tools/generateAssets.ts file. This issue occurs when the `outputDir` argument is manipulated, allowing an attacker with local access to execute arbitrary commands. **Recommendations** As a temporary workaround, avoid using the `outputDir` argument in the `generateChart()` function until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** andreahaku llm memory mcp versions up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0 **Description** Command injection is possible through the manipulation of the `hash` argument within the `auto.capture()` function located in the src/autolearn/GitHooksManager.ts file of the llm memory mcp component. This issue is restricted to local execution. **Recommendations** As a temporary workaround, consider restricting the use of the `auto.capture()` function until a fix is available.

**Name of the Vulnerable Software and Affected Versions** MauricioMilano coder-api versions prior to 1.1.1 **Description** Command injection is possible within the Projects Endpoint component. The issue resides in the `createProject()` function located in the `src/core/projects.ts` file. This flaw allows a local attacker to execute arbitrary commands on the system. **Recommendations** As a temporary workaround, restrict access to the `createProject()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** aaronsb memory-graph versions up to 5cfd2382778837b9f6399080956eee670d00452c **Description** A path traversal issue exists where a local attacker can manipulate the system. The flaw is located in the `src/tools/memoryTools.ts` file within the `JsonMemoryStorage.createDomain()`, `JsonMemoryStorage.getMemories()`, and `JsonMemoryStorage.saveMemories()` functions. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized. **Recommendations** As a temporary workaround, consider restricting the use of the `JsonMemoryStorage.createDomain()`, `JsonMemoryStorage.getMemories()`, and `JsonMemoryStorage.saveMemories()` functions until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** abrinsmead mindpilot-mcp version 0.5.0 **Description** A flaw in the `HistoryService` component allows for path traversal, a condition where an attacker can access files and directories outside the intended folder. This occurs through the manipulation of the `ID` argument and requires the attack to be launched locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.