Known Vulnerabilities for Mcp-security by Spring-ai-community
Listed below are 10 of the newest known vulnerabilities associated with "Mcp-security" by "Spring-ai-community".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61459 json | MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_des... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-61456 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 fails to sanitize SVG files uploaded through the POST /api/v1/medi... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-59998 json | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the ser... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59997 json | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a ... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59882 json | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost() does not rejec... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59151 json | Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted i... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-58525 json | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over ... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-58523 json | Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a net... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58404 json | Hugo is a static site generator. From v0.162.0 through v0.163.0, the default security.http.urls policy denies requests to loo... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-58371 json | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/java... | Not Provided | 2026-06-30 | 2026-07-01 |