Threats affecting pkg:github/hangwin/mcp-chrome-bridge

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.6	EPSS 0.8%	CVE-2026-102878hangwin mcp-chrome-bridge · Origin Validation Error High8.6EPSS 0.8%2026-09-29CVE Database V5CVE-2026-102878 CVE-2026-102878 is a high-severity vulnerability in mcp-chrome-bridge up to version 1.0.31. It involves an origin validation error in the native-server HTTP API that allows attackers to bypass Cross-Origin Resource Sharing (CORS) restrictions. This flaw enables malicious web pages to make unauthorized cross-origin requests to the local server, potentially invoking browser automation features such as script execution, reading page content, and capturing screenshots. EPSS 0.8%Vulnerability	CVE Database V5	2026-09-29

Page 1 of 1