Modelcontextprotocol Servers vulnerabilities

• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries CVE-2026-27735 Fix available 6.4 MediumFebruary 25, 2026
• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git has missing path validation when using --repository flag CVE-2025-68145 Fix available 6.4 MediumDecember 17, 2025
• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files CVE-2025-68144 Fix available 6.3 MediumDecember 17, 2025
• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations CVE-2025-68143 Fix available 6.5 MediumDecember 17, 2025
• modelcontextprotocol servers Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix CVE-2025-53110 Fix available 7.3 HighJuly 1, 2025
• modelcontextprotocol servers Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handling CVE-2025-53109 Fix available 7.3 HighJuly 1, 2025