erroneo.us
Search all guides⌘K

Digest · Wednesday

Security digest: July 9, 2025

1 editorial brief and 3 critical advisories.

All digests · RSS · Markdown

Take stock

  • Check exposure: mcp-remote: OS Command Injection via OAuth Endpoint. Anyone whose Claude Desktop, Cursor, Windsurf or other MCP client config launches mcp-remote at a version below 0.1.16, especially on Windows.
  • npm: 3 critical advisories (@builder.io/qwik-city, docusaurus-plugin-content-gists, mcp-remote). Check with npm audit (or: npm ls <package>).
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Check exposure

· Vulnerability · CVE-2025-6514

mcp-remote: OS Command Injection via OAuth Endpoint

The fix is more than a year old, but version-pinned MCP client configs and stale npx caches can keep a vulnerable mcp-remote alive, so confirm the version and move on.

Must act: Anyone whose Claude Desktop, Cursor, Windsurf or other MCP client config launches mcp-remote at a version below 0.1.16, especially on Windows.

Can relax: Users who run mcp-remote 0.1.16 or later, or who don't use mcp-remote at all.

  1. Grep MCP client configs (claude_desktop_config.json, .cursor/mcp.json, etc.) for `mcp-remote` and note any pinned version.
  2. Change pins to `mcp-remote@latest` or an explicit version at or above 0.1.16.
  3. Clear stale npx copies (`npm cache clean --force`, or delete the `_npx` directory under the npm cache) so an old cached build isn't reused.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 3

GitHub-reviewed advisories rated critical, published this day (Pacific time).

npm 3

Check: npm audit (or: npm ls <package>)