medium

• CVE-2025-68143 - mcp-server-git arbitrary repository creation 2026-06-11
• CVE-2025-68144 - mcp-server-git diff and checkout argument injection 2026-06-11
• CVE-2025-68145 - mcp-server-git repository path validation bypass 2026-06-11
• CVE-2026-11455 - MetaGPT Mermaid path command injection 2026-06-08
• CVE-2026-39922 - GeoNode service registration SSRF 2026-06-08
• CVE-2026-40181 - React Router protocol-relative open redirect 2026-06-08
• CVE-2026-46636 - Twig cached template sandbox-state bypass 2026-06-08
• CVE-2026-47742 - Shopper product Livewire authorization bypass 2026-06-08
• CVE-2026-47745 - Shopper payment, currency, and carrier authorization bypass 2026-06-08