Threats tagged 'ghsa-6pqq-x8j6-2c2f'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-129094@utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach Low2.32026-11-13GCVE DatabaseCVE-2026-129094 @utcp/http versions before 1.1.14 have a server-side request forgery (SSRF) vulnerability that allows attackers to bypass remote-loopback checks using a {host} placeholder. This enables remote attackers to access internal loopback services such as 127.0.0.1 on the affected agent machine by supplying crafted host arguments or registering tools via Streamable HTTP and SSE discovery. Report on CVE-2026-129094 Vulnerability CWE-918 #ghsa-6pqq-x8j6-2c2f	GCVE Database	2026-11-13

Page 1 of 1