Vulnerability GHSA-jwc4-922r-f2rw
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
7 days ago
October 23, 2026 at 03:31 PM UTC
@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function
1.0.0 - 1.0.1
1.0.0 - 1.0.1
Summary
@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function
Details
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.
Impacted packages
Timeline
Published
7 days ago
October 23, 2026 at 03:31 PM UTC
Last Modified
1 day ago
October 29, 2026 at 09:15 PM UTC