Figma Developer MCP < 0.6.3 RCE (GHSA-gxw4-4fc5-9gr5)

high Nessus Plugin ID 271839

Version 1.3

Jan 5, 2026, 10:40 PM

  • Detection (Added Check for OS Managed Packages)
  • Detection (Exclude certain ZTE CGSL directories by default. Modified Plugins to call Nodejs specific functions for reporting)

Plugin Feed: 202601052240

Version 1.2

Oct 30, 2025, 6:41 AM

  • Plugin metadata (Fixed CPE attribute)

Plugin Feed: 202510300641

Version 1.1

Oct 29, 2025, 3:03 AM

  • New

Plugin Feed: 202510290303

* Changelogs are generally available for changes made after Nov 1, 2022