pentest-mcp

Pentest MCP 현대적인 전송/인증 지원과 확장된 정찰 도구를 갖춘 전문 침투 테스트 MCP 서버입니다. 0.9.0에서 변경된 사항 MCP SDK를 @modelcontextprotocol/sdk@^1.26.0으로 업그레이드 MCP Inspector는 최신 릴리스@modelcontextprotocol/inspector@^0.20.0에 번들 런처와 함께 유지 Streamable HTTP가 이제 기본 네트워크 전송 방식입니다 MCPTRANSPORT=http SSE는 여전히 폐기된 호환성 모드로만 사용 가능 bearer-toke...

CVE-2026-77298 SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not...

CVE-2026-77298 SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not...

CVE-2026-77298

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier , the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy . While the standard STS AssumeRoleWithWebIdentity ...