A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcp_server.py of the component …

A command injection vulnerability has been identified in dvladimirov MCP up to version 0.1.0. The vulnerability affects the GitSearchRequest function in the mcp_server.py file of the Git Search API component. Attackers can manipulate the repo_url/pattern arguments to execute arbitrary commands remotely. The exploit has been publicly disclosed and made available, increasing the risk of active exploitation. The vulnerability was reported to the project maintainer through a GitHub issue, but no response has been received yet.