Known Vulnerabilities for Transport-http by Wso2
Listed below are 1 of the newest known vulnerabilities associated with "Transport-http" by "Wso2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-82562 json | ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a... | Not Provided | 2026-08-30 | 2026-08-29 |
| CVE-2026-82456 json | argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller creden... | Not Provided | 2026-08-29 | 2026-08-29 |
| CVE-2026-82255 json | gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credent... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-82247 json | gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' as termina... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-81100 json | tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/http... | Not Provided | 2026-08-27 | 2026-08-29 |
| CVE-2026-81099 json | tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServ... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81098 json | The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-ser... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81095 json | pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts... | Not Provided | 2026-08-27 | 2026-08-29 |
| CVE-2026-81092 json | mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/st... | Not Provided | 2026-08-27 | 2026-08-28 |
| CVE-2026-81032 json | NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service define... | Not Provided | 2026-08-26 | 2026-08-26 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wso2 | Transport-http | 6.3.8 | |||
| Application | Wso2 | Transport-http | 6.3.7 | |||
| Application | Wso2 | Transport-http | 6.3.6 | |||
| Application | Wso2 | Transport-http | 6.3.5 | |||
| Application | Wso2 | Transport-http | 6.3.4 | |||
| Application | Wso2 | Transport-http | 6.3.3 | |||
| Application | Wso2 | Transport-http | 6.3.2 | |||
| Application | Wso2 | Transport-http | 6.3.1 | |||
| Application | Wso2 | Transport-http | 6.3.0 | |||
| Application | Wso2 | Transport-http | 6.2.9 | |||
| Application | Wso2 | Transport-http | 6.2.8 | |||
| Application | Wso2 | Transport-http | 6.2.7 | |||
| Application | Wso2 | Transport-http | 6.2.6 | |||
| Application | Wso2 | Transport-http | 6.2.5 | |||
| Application | Wso2 | Transport-http | 6.2.4 | |||
| Application | Wso2 | Transport-http | 6.2.34 | |||
| Application | Wso2 | Transport-http | 6.2.33 | |||
| Application | Wso2 | Transport-http | 6.2.32 | |||
| Application | Wso2 | Transport-http | 6.2.31 | |||
| Application | Wso2 | Transport-http | 6.2.30 |