samanhappy MCPHub serverController.ts os command injection

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-11285 · Microsoft / collected KEV context

EUVD-2025-32246

GHSA-5q2p-3jg8-2m98

cve-program · CVE-2025-11285

• https://vuldb.com/?id.327043
• https://vuldb.com/?ctiid.327043
• https://vuldb.com/?submit.659734
• https://github.com/August829/YU1/issues/6

euvd · EUVD-2025-32246

• https://vuldb.com/?id.327043
• https://vuldb.com/?ctiid.327043
• https://vuldb.com/?submit.659734
• https://github.com/August829/YU1/issues/6

nvd · CVE-2025-11285

• https://github.com/August829/YU1/issues/6
• https://vuldb.com/?ctiid.327043
• https://vuldb.com/?id.327043
• https://vuldb.com/?submit.659734

osv · GHSA-5q2p-3jg8-2m98

• https://nvd.nist.gov/vuln/detail/CVE-2025-11285
• https://github.com/August829/YU1/issues/6
• https://github.com/samanhappy/mcphub
• https://vuldb.com/?ctiid.327043
• https://vuldb.com/?id.327043
• https://vuldb.com/?submit.659734

No related operational record is retained in the current change model.