Lucene search
K

7 matches found

NVD
NVD
added 2026/05/29 3:16 p.m.16 views

CVE-2026-45609

mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined in the Model Context Protocol MCP security specifications. Specifically, it processes untrusted...

7.2CVSS0.00198EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/29 1:48 p.m.8 views

CVE-2026-45609 mcp-security: Unvalidated URL Fetching (SSRF)

mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined in the Model Context Protocol MCP security specifications. Specifically, it processes untrusted...

7.2CVSS5.8AI score0.00198EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/29 1:48 p.m.10 views

CVE-2026-45609

mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined in the Model Context Protocol MCP security specifications. Specifically, it processes untrusted...

7.2CVSS5.8AI score0.00198EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/05/29 1:48 p.m.9 views

EUVD-2026-33323

mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined in the Model Context Protocol MCP security specifications. Specifically, it processes untrusted...

7.2CVSS5.8AI score0.00198EPSS
Exploits0References1
CVE
CVE
added 2026/05/29 1:48 p.m.16 views

CVE-2026-45609

CVE-2026-45609 concerns the mcp-security component of Spring AI, where unvalidated URL fetching enables SSRF prior to version 0.1.9. The vulnerability affects installations with Dynamic Client Registration (DCR) enabled and involves processing untrusted URLs used for OAuth-related discovery and m...

7.2CVSS5.8AI score0.00198EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/18 12:0 a.m.9 views

PT-2026-41691

Name of the Vulnerable Software and Affected Versions mcp-security versions prior to 0.1.9 Description The mcp-security framework fails to implement mandatory Server-Side Request Forgery SSRF mitigations—a flaw where an attacker can induce the server to make requests to an unintended location—as...

7.2CVSS5.8AI score0.00198EPSS
Exploits0References8
Microsoft KB
Microsoft KB
added 2018/04/06 7:0 a.m.113 views

March 13, 2018—KB4088787 (OS Build 14393.2125 and 14393.2126)

March 13, 2018—KB4088787 OS Build 14393.2125 and 14393.2126 Note The release also contains updates for Windows 10 Mobile OS Build 14393.2126 released on March 20, 2018. Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this...

7.8CVSS8AI score0.66554EPSS
Exploits42
Rows per page
Query Builder