Known Vulnerabilities for Mcp-project by Elie
Listed below are 10 of the newest known vulnerabilities associated with "Mcp-project" by "Elie".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59948 json | Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untr... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59253 json | n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folder... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59097 json | Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create def... | Not Provided | 2026-07-02 | 2026-07-06 |
| CVE-2026-59095 json | LobeChat before 2.2.10-canary.18 contains a server-side request forgery vulnerability that allows authenticated attackers to ... | Not Provided | 2026-07-02 | 2026-07-07 |
| CVE-2026-58653 json | PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspa... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-57923 json | In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project... | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-57922 json | In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-56776 json | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new en... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56775 json | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoin... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56696 json | OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to... | Not Provided | 2026-06-23 | 2026-06-23 |