AGENTSCORE-2026-0104
MCP package: @iris-eval/mcp-server
Published 8/13/2026 · 0.4.5 → 0.5.0
@iris-eval/mcp-server updated from 0.4.5 to 0.5.0. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.
100 → 95
Score
LOW → LOW
Risk
ALLOW
Verdict
Findings
- low command_injection: Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(` UPDATE, sanitizer:db.exec()