Known Vulnerabilities for Mcp-from-openapi by Frontmcp
Listed below are 1 of the newest known vulnerabilities associated with "Mcp-from-openapi" by "Frontmcp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-80104 json | DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload di... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-77354 json | kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in openapi... | Not Provided | 2026-08-21 | 2026-08-25 |
| CVE-2026-76905 json | kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openap... | Not Provided | 2026-08-21 | 2026-08-25 |
| CVE-2026-76390 json | In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-75054 json | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects | Not Provided | 2026-08-17 | 2026-08-17 |
| CVE-2026-73851 json | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with th... | Not Provided | 2026-08-17 | 2026-08-17 |
| CVE-2026-73502 json | kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounte... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-73501 json | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/validati... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-72855 json | Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution ... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-72717 json | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ... | Not Provided | 2026-08-19 | 2026-08-21 |