Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3484
  • PyPI/meta-ads-mcp
 meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token 23 Jul
  • Fix available
  • Severity - 7.4 (High)
PYSEC-2026-3485
  • PyPI/meta-ads-mcp
 meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch 23 Jul
  • Fix available
  • Severity - 8.3 (High)
GHSA-2v2f-mvfg-ph56
  • PyPI/meta-ads-mcp
 meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token 17 Jul
  • Fix available
  • Severity - 7.4 (High)
GHSA-45gf-fjxp-cjpq
  • PyPI/meta-ads-mcp
 meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch 17 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-413
  • PyPI/meta-ads-mcp
 Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token 29 Jun
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-9gw6-46qc-99vr
  • PyPI/meta-ads-mcp
 Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token 11 Jun
  • Fix available
  • Severity - 9.1 (Critical)