Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-gxw4-4fc5-9gr5figma-developer-mcp vulnerable to command injection in get_figma_data toolAlso filed as CVE-2025-15061, CVE-2025-53967 high Not flagged Sep 30, 2025

Versions in the registry

0.13.2 (listed), 0.13.1, 0.13.0, 0.12.0, 0.11.0, 0.10.1, 0.10.0, 0.9.0, 0.8.1, 0.8.0, 0.7.1, 0.7.0, 0.6.6, 0.6.4, 0.6.0