SE
Product
servers
by modelcontextprotocol · last CVE Feb 25, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch

Add servers to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-68145
9.1
7%
Dec 17
mcp-server-git has missing path validation when using --repository flag
Affected: < 2025.12.17
CVE-2025-68143
8.8
8%
Dec 17
mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
Affected: < 2025.9.25
CVE-2025-68144
7.1
7%
Dec 17
mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
Affected: < 2025.12.17
CVE-2026-27735
6.5
0%
Feb 25
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
Affected: < 2026.1.14
Showing 4