npm - OSV

GHSA-6gr2-qh89-hxwm

npm/@apify/actors-mcp-server

Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token 01 Jul

Fix available
Severity - 8.1 (High)

GHSA-jwp7-wg77-3w9v

npm/@apify/actors-mcp-server

Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching 19 May

Fix available
Severity - 6.1 (Medium)