servers

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locationsCVE-2025-68143modelcontextprotocol · CVSS 6.5 · 8.1% likely

   CWE-22

2. mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local filesCVE-2025-68144modelcontextprotocol · CVSS 6.3 · 7.2% likely

   CWE-88

3. mcp-server-git has missing path validation when using --repository flagCVE-2025-68145modelcontextprotocol · CVSS 6.4 · 7.0% likely

   CWE-22

4. Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink HandlingCVE-2025-53109modelcontextprotocol · CVSS 7.3 · 0.8% likely

   CWE-59

5. Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path PrefixCVE-2025-53110modelcontextprotocol · CVSS 7.3 · 0.6% likely

   CWE-22

6. mcp-server-git : Path traversal in git_add allows staging files outside repository boundariesCVE-2026-27735modelcontextprotocol · CVSS 6.4 · 0.3% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.