Threats affecting pkg:maven/org.apache.skywalking/mcp

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.7%	CVE-2026-34884Apache SkyWalking MCP · Server-Side Request Forgery (SSRF) Critical9.8EPSS 0.7%2026-08-18CVE Database V5CVE-2026-34884 Apache SkyWalking MCP version 0.1.0 contains a critical Server-Side Request Forgery (SSRF) vulnerability and a GraphQL expression injection issue. These vulnerabilities allow an attacker to manipulate server requests and inject malicious GraphQL expressions. The issue is fixed in version 0.2.0, which users are advised to upgrade to. EPSS 0.7%Vulnerability Apache Software Foundation CWE-918 #ghsa-fvf9-f2mx-m7qp	CVE Database V5	2026-08-18
High	7.1	EPSS 0.5%	CVE-2026-34476Apache SkyWalking MCP · Server-Side Request Forgery (SSRF) High7.1EPSS 0.5%2026-04-13CVE Database V5CVE-2026-34476 Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue. EPSS 0.5%Vulnerability Apache Software Foundation CWE-918	CVE Database V5	2026-04-13

Page 1 of 1