CVE-2026-51996

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function...

CVE-2026-51997

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

CVE-2026-51995

An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components...

CVE-2026-52001

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts...

CVE-2026-51997

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

CVE-2026-51997

An issue in geelen mcp-remote versions 0.1.16 through 0.1.38 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates from the open() functions within the software. No specific remediation, exploit links, or MITRE ATT&CK IDs are provided in the documents.

PT-2026-97823

Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.32 through 0.1.38 Description A remote attacker can obtain sensitive information, including internal configuration and values, by triggering metadata processing. The issue resides in the authorization server...

CVE-2026-51995: Exposure of Sensitive Information to an Unauthorized Actor

An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components...

EUVD-2026-86019

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function...

EUVD-2026-86020

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

CVE-2026-51996

The geelen mcp-remote software, versions 0.1.16 through 0.1.38 , is susceptible to a vulnerability that allows a remote attacker to achieve arbitrary code execution . The flaw is located within the src/lib/utils.ts file, specifically originating from the getServerUrlHash function. While the techn...

CVE-2026-51997: Improper Input Validation

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

PT-2026-97825

Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.16 through 0.1.38 Description A remote attacker can execute arbitrary code through the open function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-97824

Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.16 through 0.1.38 Description A code injection flaw exists in the getServerUrlHash function within src/lib/utils.ts. This issue allows a remote attacker to execute arbitrary code on the host system by providing...

CVE-2026-51997

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

CVE-2026-51996: Use of Weak Hash

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function...

CVE-2026-52001: Exposure of Sensitive Information to an Unauthorized Actor

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts...

CVE-2026-51996

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function...

EUVD-2026-86021

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts...

PT-2026-97826

Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.18 through 0.1.38 Description A flaw in the SSE Server-Sent Events transport eventSourceInit fetch wrapper located in src/lib/utils.ts allows a remote attacker to obtain sensitive information. Recommendations...