https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 18:55:23 +0000 https://db.gcve.eu/vuln/cve-2026-85626 <p><strong>Affected:</strong> cyanheads git-mcp-server</p> <p>git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Attackers can inject git command-line options like --output= to write files outside the repository to arbitrary paths accessible by the process.</p> <p><strong>Affected:</strong> cyanheads git-mcp-server</p> <p>git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Attackers can inject git command-line options like --output= to write files outside the repository to arbitrary paths accessible by the process.</p> https://db.gcve.eu/vuln/cve-2026-85626