Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-2xhg-73j7-rrgx
  • npm/@contentful/mcp-server
  • npm/@contentful/mcp-tools
 Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint 19 Aug
  • Fix available
  • Severity - 7.7 (High)