VYPR

Mcp Remote

by Geelen

Source repositories

CVEs (1)

  • CVE-2025-6514CriJul 9, 2025
    risk 0.56cvss 9.6epss 0.12

    mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL