{"api_version":"v1","generated_at":"2026-10-08T17:35:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-sonirico-mcp-shell-5f6b6242f90b","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mcp-shell","name":"mcp-shell","next_cursor":null,"observations":[{"affected":"< 0.6.0","affected_versions_present":true,"cve_id":"CVE-2026-55580","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55580","fixed":"0.6.0.","last_modified":"2026-08-25T16:08:10.442Z","patch_url":"https://github.com/sonirico/mcp-shell/security/advisories/GHSA-f5pj-2738-996m","primary_source":"","published":"2026-08-25T15:42:36.474Z"},{"affected":"< 0.6.0","affected_versions_present":true,"cve_id":"CVE-2026-55581","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55581","fixed":"0.6.0.","last_modified":"2026-08-25T19:01:56.083Z","patch_url":"https://github.com/sonirico/mcp-shell/security/advisories/GHSA-3x77-wg38-92r3","primary_source":"","published":"2026-08-25T15:40:10.992Z"},{"affected":"< 0.6.0","affected_versions_present":true,"cve_id":"CVE-2026-55582","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55582","fixed":"0.6.0.","last_modified":"2026-08-28T22:28:54.025Z","patch_url":"https://github.com/sonirico/mcp-shell/security/advisories/GHSA-74hp-mggr-hv58","primary_source":"","published":"2026-08-25T15:37:43.486Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"sonirico"}}