Skip to content

v2025.9.0.6 - CVE-2025-6514 MCP-Remote RCE Scanner + FP Filter

Choose a tag to compare

View all tags
@rosschurchill rosschurchill released this 03 Jan 21:40
· 347 commits to main since this release
v2025.9.0.6
002cc71

🔒 Security Updates

CVE-2025-6514 MCP-Remote RCE Scanner (v2025.9.0.6)

  • New MCPRemoteRCEScanner for detecting vulnerable mcp-remote package
  • CVE-2025-6514: Critical OS command injection (CVSS 9.6)
  • Detects vulnerable versions 0.0.5-0.1.15 in package.json, lockfiles
  • Scans Claude Desktop config for vulnerable MCP server configurations

Intelligent False Positive Filter (v2025.9.0.5)

  • New fp_filter.py module reduces noise in scan results
  • Context-aware filtering for common false positive patterns
  • Improves signal-to-noise ratio for security findings

Installation

pip install medusa-security==2025.9.0.6

🤖 Generated with Claude Code

Assets 2
Loading