Product
The @rog0x/mcp-git-tools package version 1.0.1 contains a vulnerability that allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.