Vulnerability GHSA-2vq3-mpmf-9xgr
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
7 days ago
October 23, 2026 at 03:31 PM UTC
@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
1.0.0 - 1.0.1
1.0.0 - 1.0.1
Summary
@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
Details
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.
Impacted packages
Timeline
Published
7 days ago
October 23, 2026 at 03:31 PM UTC
Last Modified
1 day ago
October 29, 2026 at 09:15 PM UTC