NPM: CamoFox MCP: Unauthenticated HTTP MCP browser-control surface

NPM: CamoFox MCP: Unauthenticated HTTP MCP browser-control surface vulnerability discovered by ? in WordPress Npm camofox-mcp versions 1.13.2...

PT-2023-15966 · Unknown · Async Http Client

Name of the Vulnerable Software and Affected Versions: Async HTTP Client versions prior to 1.13.2 Description: The issue is related to insufficient validation of HTTP header field values before sending them to the network, allowing attackers to inject new HTTP header fields or entirely new reques...

Omrilotan async-git OS Command Injection Vulnerability

Omrilotan async-git is a Javascript-based codebase from the individual developers of Omrilotan that supports interaction with git repositories. Omrilotan async-git package before 1.13.2 contains an operating system command injection vulnerability that allows injection of operating system commands...