Is `mcp-server-git` safe?

4 fixed advisories Facts from the mcp-audit registry about the pypi package mcp-server-git. The same data is served as JSON.

Check it from your terminal

mcp-audit vet mcp-server-git --ecosystem pypi

Offline: it uses the registry bundled with mcp-audit. mcp-audit update-registry fetches the newest one.

Registry facts

Maintainer	Anthropic
Verified publisher	yes
Entry last checked	2026-08-22
Hash pins	none recorded
Provenance expected	yes; a missing Sigstore attestation is reported (`ATTEST-013`) with `--verify-signatures`
Repository	https://github.com/modelcontextprotocol/servers

Recorded advisories 4

Advisories for mcp-server-git
Advisory	CVSS	Summary	Fixed in
CVE-2025-68143	not recorded	mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations	2025.9.25
CVE-2025-68144	not recorded	mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files	2025.12.18
CVE-2025-68145	not recorded	mcp-server-git has missing path validation when using --repository flag	2025.12.18
CVE-2026-27735	not recorded	mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries	2026.1.14

Advisories with no recorded fix are listed first. CVE IDs link to NVD, GHSA IDs to GitHub and other IDs to OSV. A fixed advisory affects only versions below its fix; vet exits 1 only for advisories with no fix.

What it can do

It can read or change git repositories.

Capability tags come from the registry. mcp-audit uses them to find dangerous combinations with your other servers.

Check how you run it

This page describes the public package. What matters is your setup: which version you pin, which secrets you pass, and which other servers sit next to it.

mcp-audit check

Badge for your README

mcp-audit4 fixed CVEs

Preview drawn by this page. The real badge is rendered by shields.io from this JSON and updates when the registry does.

[![mcp-audit](https://img.shields.io/endpoint?url=https://mcp-audit.dev/v1/badge/pypi/mcp-server-git.json)](https://mcp-audit.dev/servers/pypi/mcp-server-git/)

Is mcp-server-git safe?