Approved changes feed: RSS · Atom
cpe:2.3:a:missionsquad:mcp-api:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Missionsquad (bea796c0-f548-541e-bedf-28929bc2a656) |
|---|---|
| Product | Mcp Api (0c50a48a-ed2c-5848-b5b5-421e424a531e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19040 |
vulnerable | 2026-09-16 04:34:15.470372 |
MissionSquad mcp-api dcrClients.ts server-side request forgery
MEDIUM (6.3)
A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to fix this issue. This patch is called f068ab4ad6f0907ac7001b995588c2673f11a755. You should upgrade the affected component.
Published: 2026-08-06T13:15:12.697Z
Updated: 2026-08-06T15:05:57.661Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19041 |
vulnerable | 2026-09-16 04:34:15.274705 |
MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection
MEDIUM (6.3)
A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. Upgrading to version 1.11.9 is sufficient to resolve this issue. The identifier of the patch is a40f54d4533ba6618e1749383a245900eeb024c1. The affected component should be upgraded.
Published: 2026-08-06T13:30:13.459Z
Updated: 2026-08-06T17:31:30.989Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.