CVE-2025-4144

CVE-2025-4144 affects Cloudflare’s MCP-based workers-oauth-provider. A flaw in the PKCE implementation allows an attacker to bypass PKCE verification, effectively bypassing PKCE protection. Descriptions across sources (Veracode, Red Hat, GHSA advisories, OSV) state that the OAuth check can be ski...

CVE-2025-4144 PKCE bypass via downgrade attack

PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . However, it was found that an attacker could cause the check to be skipped. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/27...

CVE-2025-4144 PKCE bypass via downgrade attack

PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . However, it was found that an attacker could cause the check to be skipped. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/27...

PT-2025-18345 · Unknown · Workers-Oauth-Provider

Name of the Vulnerable Software and Affected Versions: workers-oauth-provider affected versions not specified Description: The issue is related to the OAuth implementation in workers-oauth-provider, part of the MCP framework. An attacker could cause the PKCE check to be skipped, completely...

Researchers Demonstrate How MCP Prompt Injection Can Be Used for Both Attack and Defense

As the field of artificial intelligence AI continues to evolve at a rapid pace, fresh research has found how techniques that render the Model Context Protocol MCP susceptible to prompt injection attacks could be used to develop security tooling or identify malicious tools, according to a new repo...

Introducing the MCP Server for Wiz: Smarter AI Context, Stronger Cloud Security

Unified model context, real-time security answers, and a faster path to remediation...

This Week in Spring - April 15th, 2025

Spring AI M7 is here! This new release includes a bunch of awesome new features! And some refactorings. Notably that the Spring AI auto-configuration has changed from a single monolithic artifact to individual auto-configuration artifacts per model, vector store, and other components. This change...

Securing Spring AI MCP servers with OAuth2

Spring AI offers support for Model Context Protocol, or MCP for short, which allows AI models to interact with and access external tools and resources in a structured way. With Spring AI, developers can create their own MCP Servers and expose capabilities to AI models in just a few lines of code...

PT-2025-25442

Name of the Vulnerable Software and Affected Versions MCP Inspector versions prior to 0.14.1 Description The MCP Inspector is a developer tool used for testing and debugging MCP servers. Versions prior to 0.14.1 are vulnerable to remote code execution RCE due to a lack of authentication between t...

This Week in Spring – March 18th, 2025

Hi, Spring fans! I just got back from the amazing JavaOne show held in Redwood Shores. It was a fun, uproarious event and a great chance to reconnect with tons of friends, old and new. I love this community! One of the central highlights of this show? Java 24 is here, finally! And, as usual, we'v...

This Week in Spring - February 4th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's February 4th, 2025, as I write this. We are ten days away from Valentine's day, and about a month away from Devnexus. Lots to look forward to, in both the short term and the long term! Let's dive right into this week's...

awslabs-ccapi-mcp-server (>=1.0.1 <=1.0.18), bridgecrew (>=3.2.415 <=3.2.477) +9 more potentially affected by unknown CVE via asteval (=1.0.5)

asteval PYPI version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - awslabs-ccapi-mcp-server =1.0.1, =3.2.415, =3.2.415, =0.1.130, =6.0.0, =5.8.0, =5.8.0, =0.0.8, =0.1.0, =0.15.0 Source cves: unknown CVE Source...

This Week in Spring - January 14th, 2025

Hi, Spring fans, and greetings from the island of St. Barths! Salut depuis l'île de Saint-Barthélemy! I'm on a bit of PTO and have been bouncing around from one beach to another with my family. I just landed on a winning combination for a beach: warm water, a restaurant/bar, and some for-pay seat...

This Year in Spring - December 31st, 2024

Hi Spring fans! Happy New Year! And welcome to another installment of This Year in Spring! The year that was... I write this edition from a desk overlooking the beautiful jungle of Martinique, a beautiful island nation in the French Caribbean. I’m sipping some rhum martinique , enjoying the...

free-mcp-excel (>=0.1.2 <=0.1.3) potentially affected by CVE-2024-53924 via pycel (=1.0.0b30)

pycel PYPI version =1.0.0b30 is affected by a known vulnerability. The following packages have a transitive dependency on pycel and may be impacted: - free-mcp-excel =0.1.2, =0.1.3 Source cves: CVE-2024-53924 Source advisory: SNYK:PYTHON-PYCEL-10050519...

Malicious code in story-mcp-hub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e663c654e00b0eb9bdfecb5446b4c56d8f8799ef600619c3f0577bd30863476b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in mcp-xyz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4d411df043997ef0429e5915d45bcddf0e361d525c4f471e32c861e9a3553fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4223 Malicious code in mcp-xyz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4d411df043997ef0429e5915d45bcddf0e361d525c4f471e32c861e9a3553fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-3471 Malicious code in story-mcp-hub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e663c654e00b0eb9bdfecb5446b4c56d8f8799ef600619c3f0577bd30863476b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

dagster-dbt (>=0.21.7 <=0.21.12), dbt-docs-mcp (=0.0.1) +4 more potentially affected by CVE-2024-36105 via dbt-core (>=1.8.0 <=1.8.0rc2)

dbt-core PYPI version =1.8.0, =0.21.7, =0.5.3, =1.12.1rc1, =1.14.0b6 Source cves: CVE-2024-36105 Source advisory: OSV:GHSA-PMRX-695R-4349...