mcp-watch vulnerabilities (npm)

1 vulnerability.

• mcp-watch npm MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL CVE-2025-66401 9.8 CriticalDecember 1, 2025