mcp-ripgrep vulnerabilities

CVEs whose affected-version data names the mcp-ripgrep package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113378Medium· 5.3PoC

today

mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command inje…

▾ Twilightmcollina · mcp-ripgrepvia CVEORG