---
title: "Security digest: July 9, 2025"
url: https://erroneo.us/security/2025-07-09/
description: "July 9, 2025 vulnerability digest: 1 brief (mcp-remote: OS Command Injection via OAuth…); 3 critical advisories (npm). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-07-09
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: July 9, 2025

1 editorial brief and 3 critical advisories.

## Take stock

- Check exposure: mcp-remote: OS Command Injection via OAuth Endpoint . Anyone whose Claude Desktop, Cursor, Windsurf or other MCP client config launches mcp-remote at a version below 0.1.16, especially on Windows.
- npm: 3 critical advisories ( @builder.io/qwik-city , docusaurus-plugin-content-gists , mcp-remote ). Check with npm audit (or: npm ls <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [mcp-remote: OS Command Injection via OAuth Endpoint](https://erroneo.us/security/briefs/mcp-remote-oauth-command-injection/index.md): The fix is more than a year old, but version-pinned MCP client configs and stale npx caches can keep a vulnerable mcp-remote alive, so confirm the version and move on.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2025-53620](https://erroneo.us/security/cve/CVE-2025-53620/index.md) Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests — npm @builder.io/qwik-city < 1.13.0 → 1.13.0
- [CVE-2025-53624](https://erroneo.us/security/cve/CVE-2025-53624/index.md) docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token — npm docusaurus-plugin-content-gists < 4.0.0 → 4.0.0
- [CVE-2025-6514](https://erroneo.us/security/cve/CVE-2025-6514/index.md) mcp-remote exposed to OS command injection via untrusted MCP server connections — npm mcp-remote >= 0.0.5, < 0.1.16 → 0.1.16

---
Source page: https://erroneo.us/security/2025-07-09/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt