Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-jwc4-922r-f2rw@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch functionAlso filed as CVE-2026-106764 high Affected Oct 23, 2026

Versions in the registry

1.0.1 (listed)