Cpe:2.3:a:mac-Shell-Mcp:mac-Shell-Mcp:*:*:*:*:*:*:*:*

The mac-shell-mcp package before version 2.0.0 is vulnerable to OS command injection via malicious prompt manipulation of execute_command arguments, allowing unauthorized code execution.