MEDIUMPyPI
GHSA-5cgr-j3jf-jw3v· CVE-2025-68143, PYSEC-2026-1621mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
Modified: 7/7/2026
package
PyPI/mcp-server-git
pkg:pypi/mcp-server-git
MEDIUMPyPI
GHSA-9xwc-hfwc-8w59· CVE-2025-68144, PYSEC-2026-1622mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
Modified: 7/7/2026
MEDIUMPyPI
GHSA-j22h-9j4x-23w5· CVE-2025-68145, PYSEC-2026-1623mcp-server-git has missing path validation when using --repository flag
Modified: 7/7/2026
MEDIUMPyPI
GHSA-vjqx-cfc4-9h6v· CVE-2026-27735, PYSEC-2026-2630mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
Modified: 7/13/2026
—PyPI
PYSEC-2026-1621· CVE-2025-68143, GHSA-5cgr-j3jf-jw3vmcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
Modified: 7/7/2026
—PyPI
PYSEC-2026-1622· CVE-2025-68144, GHSA-9xwc-hfwc-8w59mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
Modified: 7/7/2026
—PyPI
PYSEC-2026-1623· CVE-2025-68145, GHSA-j22h-9j4x-23w5mcp-server-git has missing path validation when using --repository flag
Modified: 7/7/2026
—PyPI
PYSEC-2026-2630· CVE-2026-27735, GHSA-vjqx-cfc4-9h6vmcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
Modified: 7/13/2026