Lucene search
+L

7 matches found

PyPA
PyPA
•added 2026/07/23 11:41 a.m.•45 views

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools Summarypraisonaiagents.mcp.ToolsMCPServer.runsse builds a Starlette MCPHTTP+SSE server around mcp.server.sse.SseServerTransport. The server exposes/sse and /messages/, but it does not validate...

8.3CVSS6.1AI score0.00224EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder