Approved changes feed: RSS · Atom

cpe:2.3:a:xixianliang:harmonyos_mcp_server:0.1.0:*:*:*:*:*:*:*

part: a version: 0.1.0 update: *

VendorXixianliang (0adb3c51-f9aa-50ed-b2ae-b62fa0e730fe)
ProductHarmonyos Mcp Server (ae9008bf-286d-513c-a909-bedbac514dfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/xixianliang/harmonyos-mcp-server purl2cpe 2026-07-28 16:40:55.709945

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2131 vulnerable 2026-06-08 07:55:16.584704 XixianLiang HarmonyOS-mcp-server input_text os command injection
MEDIUM (6.3)
A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function input_text. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Published: 2026-02-08T02:32:07.119Z
Updated: 2026-02-23T09:37:10.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.