Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-g9hg-qhmf-q45m
  • npm/@modelcontextprotocol/inspector
 MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server 08 Sep 2025
  • Fix available
  • Severity - 8.6 (High)
GHSA-7f8r-222p-6f5g
  • npm/@modelcontextprotocol/inspector
 MCP Inspector proxy server lacks authentication between the Inspector client and proxy 13 Jun 2025
  • Fix available
  • Severity - 9.4 (Critical)