mcp-remote is a Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth

Affected versions of this package are vulnerable to Command Injection via the function sanitizeUrlz in the file utils.ts. An attacker can execute arbitrary system commands by tricking a user into connecting to a malicious MCP server.

lightrag-hku is a LightRAG: Simple and Fast Retrieval-Augmented Generation

Affected versions of this package are vulnerable to Directory Traversal via the upload_to_input_dir function in the file api/routers/document_routes.py. An attacker can access or modify files outside the intended directory by manipulating the file.filename argument during file upload.

Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the storage of authentication tokens in plaintext within config.xml files on the controller. An attacker can gain unauthorized access to sensitive credentials by obtaining Item/Extended Read permissions or direct access to the file system. Additionally, the configuration form does not mask these tokens, allowing them to be observed and captured.