mcp-server-git vulnerabilities (PyPI)

4 vulnerabilities.

• mcp-server-git PyPI mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries CVE-2026-27735 Fix available 6.4 MediumFebruary 25, 2026
• mcp-server-git PyPI mcp-server-git has missing path validation when using --repository flag CVE-2025-68145 Fix available 6.4 MediumDecember 17, 2025
• mcp-server-git PyPI mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files CVE-2025-68144 Fix available 6.3 MediumDecember 17, 2025
• mcp-server-git PyPI mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations CVE-2025-68143 Fix available 6.5 MediumDecember 17, 2025