io.github.justice8096/sagemath-mcp-server
MCP server wrapping SageMath's full computer algebra system — 10 symbolic-math tools for LLMs.
1.0.1version the registry lists (1 published)
1reported issue
Yeslisted version affected
Hold off. At least one reported issue affects the version the registry lists. The package may have a newer release, so read the issue below and check before you install.
Registry name io.github.justice8096/sagemath-mcp-server
· Source code
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-2vq3-mpmf-9xgr@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functionsAlso filed as CVE-2026-106763 | high | Affected | Oct 23, 2026 |
Versions in the registry
1.0.1 (listed)