CVE-2025-6514

Named by 3 kept items in this workspace.

Search every workspace for CVE-2025-6514. It matches the name as written, so it can find other things that share it.

The items that name it 3

30+ MCP CVEs in Two Months: What the Early-2026 Vulnerability Wave Means for Your MCP Supply Chain
article2026-09-23
CVSS 9.6 remote-code-execution flaw in mcp-remote; attacker-controlled authorization_endpoint URL returned during OAuth discovery is passed into the open package, which shells out to launch a browser, allowing shell metacharacters to execute OS commands. Full RCE demonstrated on Windows via PowerShe
SecureAI-Scan
repo2026-08-05
anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injection
repo2026-05-07
mcp-remote proxy RCE, CVSS 9.6, 437,000+ affected installs

All cves in this workspace.