Skip to content

GHSA lookup

GHSA-J22H-9J4X-23W5

Pruva has a verified reproduction for GHSA-J22H-9J4X-23W5: MCP Server Git: Path Traversal via Missing Repository Path Validation. The canonical evidence record is REPRO-2026-00076.

REPRO

REPRO-2026-00076

Package

mcp-server-git · pip

Severity

MEDIUM

Status

published