Merged: Anthropic Git MCP prompt injection CVEs

This post has been merged to avoid duplicate coverage of the same CVE/topic.

See the canonical, maintained write-up:

Cyata — Prompt-injection reachable issues in Anthropic’s official Git MCP server