All products

mcp-watch

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URLCVE-2025-66401 · GHSA-27M7-FFHQ-JQRM mcp-watch npm Critical No fix reported