Known Vulnerabilities for Mcp-server by @contentful
Listed below are 10 of the newest known vulnerabilities associated with "Mcp-server" by "@contentful".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-117472 json | Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hard-c... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-117471 json | Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-117470 json | Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verification. A... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-117469 json | Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-reposi... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-117468 json | Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a devi... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-116827 json | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() functi... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-116826 json | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allows a... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-116801 json | Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo relat... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-116800 json | WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include PHP ... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-116748 json | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes th... | Not Provided | 2026-10-26 | 2026-10-26 |