2 matches found
Insecure Default Initialization of Resource
Overview @kozou/api is a Kozou's own REST layer: serves table CRUD / VIEW reads / OpenAPI from a SchemaContext. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to insufficient validation of the Host and Origin headers in the MCP HTTP server,...
8.4CVSS6.2AI score
SaveExploits0References5
Insecure Default Initialization of Resource
Overview @kozou/mcp is a Kozou MCP server for AI agents stdio + HTTP Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to insufficient validation of the Host and Origin headers in the MCP HTTP server, unbounded request-body buffering, improper...
8.4CVSS6.2AI score
SaveExploits0References5
20