336 matches found
PYSEC-2026-2623 mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint
Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCPALLOWANONYMOUSACCESS=true is set required for the HTTP server to function without OAuth/API key,...