Known Vulnerabilities for Mcp Server by Github
Listed below are 1 of the newest known vulnerabilities associated with "Mcp Server" by "Github".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125403 json | Ettercap through 0.8.4.1 contains an out-of-bounds read and size_t underflow vulnerability in sslw_remove_sts() in src/ec_ssl... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125394 json | FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and update... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125390 json | Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains an arbitrary local file read vulnerability in FolderController::a... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125379 json | Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to r... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125367 json | Pico through 4.1.2 contains a server-side request forgery vulnerability in the feeds service that allows signed-up users to m... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125366 json | Omnom through 0.9.0 contains a server-side request forgery vulnerability that allows authenticated users to make server reque... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125363 json | MikroDash before 0.8.79 contains a server-side request forgery vulnerability that allows any signed-in user, including the vi... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125359 json | Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, incl... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125087 json | A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown function of the file... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124916 json | PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration... | Not Provided | 2026-11-09 | 2026-11-09 |