https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T22:48:26.401615+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09316 bdu:2025-09316 2026-10-20T22:48:26.404519+00:00 bdu:2025-09316 https://cve.radiocsirt.org/vuln/euvd-2026-247068 EUVD-2026-247068 2026-10-20T22:48:26.404552+00:00 EUVD-2026-247068 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6514 fkie_cve-2025-6514 2026-10-20T22:48:26.404565+00:00

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

 https://cve.radiocsirt.org/vuln/ghsa-6xpm-ggf7-wc3p GHSA-6xpm-ggf7-wc3p — mcp-remote exposed to OS command injection via untrusted MCP server connections 2026-10-20T22:48:26.404591+00:00

Affected: npm: mcp-remote

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL