How to: CVE-2025-6514 (2025-07-09)
```
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
```
- [ChaseHCS/CVE-2025-6514](https://github.com/ChaseHCS/CVE-2025-6514)
- [dotsetlabs/overwatch](https://github.com/dotsetlabs/overwatch)