What is GHSA-g33m-cxj9-5gvx?

GHSA-g33m-cxj9-5gvx is a security advisory published by GitHub Security Advisories with Low severity. A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL...

Which CVE IDs does GHSA-g33m-cxj9-5gvx cover?

GHSA-g33m-cxj9-5gvx covers the following CVE IDs: CVE-2026-19964. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g33m-cxj9-5gvx?

GHSA-g33m-cxj9-5gvx has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-g33m-cxj9-5gvxLowCVSS 5.5

A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL...

Vendor

GitHub Security Advisories

Published

August 17, 2026

Last Modified

August 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-19964 →

📋 Description

A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The manipulation of the argument code results in code injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-19964
https://vuldb.com/cve/CVE-2026-19964
https://vuldb.com/submit/872906
https://vuldb.com/vuln/391141
https://vuldb.com/vuln/391141/cti
http://github.com/Jij-Inc/Jij-MCP-Server/issues/4
https://github.com/advisories/GHSA-g33m-cxj9-5gvx