Threats tagged 'ghsa-x78j-x58j-m4h8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-7729pixelsock directus-mcp · Server-Side Request Forgery Medium5.32026-05-04GCVE DatabaseCVE-2026-7729 A server-side request forgery (SSRF) vulnerability exists in pixelsock directus-mcp version 1.0.0 within the validateUrl function of the MCP Interface component. This flaw allows remote attackers to manipulate the fileUrl argument, potentially causing the server to make unintended requests. Public exploit code is available, and a fix is pending acceptance in a pull request. Report on CVE-2026-7729 Vulnerability CWE-918 #ghsa-x78j-x58j-m4h8	GCVE Database	2026-05-04

Page 1 of 1