p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de figma-developer-mcp

Vulnerabilidades publicadas para figma-developer-mcp en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidad: 1

  1. CVE-2025-15061

    Crítica · CVSS 9.8EPSS 2,18%Corrección disponible

    Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability

    Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Framelink Figma MCP Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the fetchWithRetry method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27877.

    figma-developer-mcpNode.js
    • Actualiza a 0.6.3
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →