Roo Code
Roo Code · Everything the hub tracks about Roo Code: MCP Clients.
MCP Clients
Roo Code
Yes: Tools, Resources, Local (stdio), Remote (HTTP/SSE)
6 of 10 unknown
Full mcp detail →Security advisories (11)
1 critical · 8 high · 2 mediumPotential Remote Code Execution via zsh command validation bug
Roo Code · CVE-2025-65946 · GHSA-hwm7-w97p-4h8p
Critical command injection vulnerability in GitHub actions workflow
Roo Code · CVE-2025-58371 · GHSA-xr6r-vj48-29f6
Symlink-bypass of .rooignore leading to unintended file disclosure
Roo Code · CVE-2025-58373 · GHSA-p76r-7mc3-qh7c
Auto-approve allows npm install execution of malicious postinstall acripts
Roo Code · CVE-2025-58374 · GHSA-c292-qxq4-4p2v
Potential Remote Code Execution via .code-workspace
Roo Code · CVE-2025-58372 · GHSA-4pqh-4ggm-jfmm
Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference
Roo Code · CVE-2025-58370 · GHSA-2rm5-cvcm-7592
Potential Remote Code Execution via Auto-Execute Commands
Roo Code · CVE-2025-57771 · GHSA-wrh9-463x-7wvv
Missing Line Break Validation in Command Execution Tool
Roo Code · CVE-2025-54377 · GHSA-p278-52x9-cffx
Potential Remote Code Execution via .vscode/settings.json in the Roo Code extension
Roo Code · CVE-2025-53536 · GHSA-3765-5vjr-qjgm
Potential Information Leakage via JSON Schema in the Roo Code extension
Roo Code · CVE-2025-53097 · GHSA-wr2q-46pg-f228
Potential Remote Code Execution via Model Context Protocol in the Roo Code extension
Roo Code · CVE-2025-53098 · GHSA-5x8h-m52g-5v54
Other tools
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.