Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3866
  • PyPI/nextcloud-mcp-server
 nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default ) 10 Sep
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-8vh3-g2qg-2h2c
  • PyPI/nextcloud-mcp-server
 nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default ) 25 Aug
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2026-55640
  • github.com/cbcoutinho/nextcloud-mcp-server
 Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default ) 25 Aug
  • Fix available
  • Severity - 9.1 (Critical)