Lucene search
+L

6 matches found

PyPA
PyPA
added 2026/07/23 11:41 a.m.39 views

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools Summarypraisonaiagents.mcp.ToolsMCPServer.runsse builds a Starlette MCPHTTP+SSE server around mcp.server.sse.SseServerTransport. The server exposes/sse and /messages/, but it does not validate...

8.3CVSS5.6AI score0.00193EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder