Cyanheads Git-mcp-server vulnerabilities

• cyanheads git-mcp-server git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters CVE-2026-85626 8.7 HighSeptember 4, 2026
• cyanheads git-mcp-server @cyanheads/git-mcp-server vulnerable to command injection in several tools CVE-2025-53107 Fix available EPSS 24.5% 7.5 HighJune 30, 2025