Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@justice8096/sagemath-mcp-server
@justice8096/sagemath-mcp-server vulnerabilities (npm)
1 vulnerability.
@justice8096/sagemath-mcp-server
npm
@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
CVE-2026-106763
7.5
High
October 23, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open