Ai-sdlc-framework vulnerabilities
We track 1 vulnerability in Ai-sdlc-framework products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Ai-sdlc-framework vulnerabilities
- 7.8 High severity
ai-sdlc: Improper Neutralization of Special Elements used in an OS Command
The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument. The unvalidated repo value is interpolated into gh issue view or gh pr