{
  "license": "CC-BY-4.0",
  "license_url": "https://creativecommons.org/licenses/by/4.0/",
  "attribution": "Still OS Digital Holdings LLC — https://stillosdigitalholdings.com/advisories",
  "advisories": [
    {
      "schema_version": "1.6.0",
      "id": "STILLOS-2026-0001",
      "aliases": [
        "CVE-2026-106763"
      ],
      "modified": "2026-10-21T00:00:00Z",
      "published": "2026-10-21T00:00:00Z",
      "summary": "Command Injection (CWE-78) — Remote Code Execution in @justice8096/sagemath-mcp-server",
      "details": "A remote attacker can execute arbitrary code via the escapeShellString and sanitizeCode functions.\n\nAffected component: build/services/sage-executor.js — escapeShellString / sanitizeCode escape the double-quote and dollar-sign characters but not the backslash, so a tool-call argument containing a backslash followed by a double quote closes the quoted context and injects an arbitrary command into the local sage -c shell invocation.\n\nExposure, not accusation: a coordinated-disclosure finding, not an assertion of intent by any maintainer.",
      "affected": [
        {
          "package": {
            "ecosystem": "npm",
            "name": "@justice8096/sagemath-mcp-server",
            "purl": "pkg:npm/%40justice8096/sagemath-mcp-server"
          },
          "ranges": [
            {
              "type": "SEMVER",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "1.0.1"
                }
              ]
            }
          ],
          "versions": [
            "1.0.1"
          ]
        }
      ],
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106763"
        },
        {
          "type": "PACKAGE",
          "url": "https://www.npmjs.com/package/@justice8096/sagemath-mcp-server"
        },
        {
          "type": "REPORT",
          "url": "https://github.com/justice8096/sagemath-mcp-server/issues/1"
        }
      ],
      "credits": [
        {
          "name": "Still OS Digital Holdings LLC",
          "type": "FINDER"
        }
      ],
      "database_specific": {
        "license": "CC-BY-4.0",
        "cwe": "CWE-78",
        "class": "Command Injection (CWE-78) — Remote Code Execution",
        "status": "PUBLISHED",
        "source": "https://stillosdigitalholdings.com/advisories/CVE-2026-106763",
        "disclosure_state": "ALIAS_PUBLISHED_DETAIL"
      },
      "severity": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ]
    },
    {
      "schema_version": "1.6.0",
      "id": "STILLOS-2026-0002",
      "aliases": [
        "CVE-2026-106764"
      ],
      "modified": "2026-10-21T00:00:00Z",
      "published": "2026-10-21T00:00:00Z",
      "summary": "Command Injection (CWE-78) — Remote Code Execution in @rog0x/mcp-git-tools",
      "details": "A remote attacker can execute arbitrary code via the resolveBaseBranch function.\n\nAffected component: src/tools/git-branch.ts — resolveBaseBranch passes the baseBranch tool argument unescaped into a git command string (git -C <path> rev-parse --verify <baseBranch>) executed with child_process.execSync.\n\nExposure, not accusation: a coordinated-disclosure finding, not an assertion of intent by any maintainer.",
      "affected": [
        {
          "package": {
            "ecosystem": "npm",
            "name": "@rog0x/mcp-git-tools",
            "purl": "pkg:npm/%40rog0x/mcp-git-tools"
          },
          "ranges": [
            {
              "type": "SEMVER",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "1.0.1"
                }
              ]
            }
          ],
          "versions": [
            "1.0.1"
          ]
        }
      ],
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106764"
        },
        {
          "type": "PACKAGE",
          "url": "https://www.npmjs.com/package/@rog0x/mcp-git-tools"
        },
        {
          "type": "REPORT",
          "url": "https://github.com/rog0x/mcp-git-tools/issues/1"
        }
      ],
      "credits": [
        {
          "name": "Still OS Digital Holdings LLC",
          "type": "FINDER"
        }
      ],
      "database_specific": {
        "license": "CC-BY-4.0",
        "cwe": "CWE-78",
        "class": "Command Injection (CWE-78) — Remote Code Execution",
        "status": "PUBLISHED",
        "source": "https://stillosdigitalholdings.com/advisories/CVE-2026-106764",
        "disclosure_state": "ALIAS_PUBLISHED_DETAIL"
      },
      "severity": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ]
    },
    {
      "schema_version": "1.6.0",
      "id": "STILLOS-2026-0003",
      "aliases": [
        "CVE-2026-106765"
      ],
      "modified": "2026-10-21T00:00:00Z",
      "published": "2026-10-21T00:00:00Z",
      "summary": "Command Injection (CWE-78) — Remote Code Execution in @rog0x/mcp-docker-tools",
      "details": "A remote attacker can execute arbitrary code via the handleImageList function; the docker_image_list filter argument is appended unescaped to a shell command executed via child_process.execSync.\n\nAffected component: src/tools/image-list.ts — handleImageList appends the docker_image_list filter tool argument unescaped to a docker images command string executed with child_process.execSync.\n\nExposure, not accusation: a coordinated-disclosure finding, not an assertion of intent by any maintainer.",
      "affected": [
        {
          "package": {
            "ecosystem": "npm",
            "name": "@rog0x/mcp-docker-tools",
            "purl": "pkg:npm/%40rog0x/mcp-docker-tools"
          },
          "ranges": [
            {
              "type": "SEMVER",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "1.0.1"
                }
              ]
            }
          ],
          "versions": [
            "1.0.1"
          ]
        }
      ],
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106765"
        },
        {
          "type": "PACKAGE",
          "url": "https://www.npmjs.com/package/@rog0x/mcp-docker-tools"
        },
        {
          "type": "REPORT",
          "url": "https://github.com/rog0x/mcp-git-tools/issues/1"
        }
      ],
      "credits": [
        {
          "name": "Still OS Digital Holdings LLC",
          "type": "FINDER"
        }
      ],
      "database_specific": {
        "license": "CC-BY-4.0",
        "cwe": "CWE-78",
        "class": "Command Injection (CWE-78) — Remote Code Execution",
        "status": "PUBLISHED",
        "source": "https://stillosdigitalholdings.com/advisories/CVE-2026-106765",
        "disclosure_state": "ALIAS_PUBLISHED_DETAIL"
      },
      "severity": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ]
    }
  ],
  "_links": {
    "capabilities": "https://stillosdigitalholdings.com/advisories/capabilities.json",
    "resident_check": "https://stillosdigitalholdings.com/advisories/check",
    "license": "https://creativecommons.org/licenses/by/4.0/"
  }
}