Known Vulnerabilities for Image-gen-mcp by Ichigo3766
Listed below are 10 of the newest known vulnerabilities associated with "Image-gen-mcp" by "Ichigo3766".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-71210 json | Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) resolves a target hostname once, checks the resolv... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71209 json | audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET routes against r... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71202 json | The raster Rust crate's crop() function (src/editor.rs) clamps the crop width/height against source dimensions but only clamp... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-70631 json | FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the n... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-70591 json | Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fe... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-70558 json | Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and f... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-70484 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy cha... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-70374 json | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail generation ... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-69259 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Ma... | Not Provided | 2026-08-04 | 2026-08-04 |
| CVE-2026-69089 json | Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized $image argu... | Not Provided | 2026-08-03 | 2026-08-03 |