CVE-2026-119287 - Zuke: Command-form registry descriptors bypass the MCP launch policy
CVE ID :CVE-2026-119287 Published : Oct. 30, 2026, 4:17 p.m. | 1 hour, 43 minutes ago Description :Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the...