CVE-2026-101918 vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2, tritonserver-backend-vllm-cuda-13.0, superset, openstack-placement-2026.1, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-keystone-2025.1, openstack-nova-2025.1,...

GHSA-42VR-XJ54-VC7V vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2, tritonserver-backend-vllm-cuda-13.0, superset, openstack-placement-2026.1, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-keystone-2025.1, openstack-nova-2025.1,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: kserve-pmmlserver-fips, mcp-atlassian, openstack-client-2026.1, pgadmin4, kubeflow-pipelines, litellm, ansible-operator, kserve-huggingfaceserver-cuda-13.3, az, datadog-agent-fips, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes, jupyter-base-notebook,...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: kserve-pmmlserver-fips, mcp-atlassian, openstack-client-2026.1, pgadmin4, kubeflow-pipelines, litellm, ansible-operator, kserve-huggingfaceserver-cuda-13.3, az, datadog-agent-fips, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes, jupyter-base-notebook,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: kserve-pmmlserver-fips, mcp-atlassian, openstack-client-2026.1, pgadmin4, kubeflow-pipelines, litellm, ansible-operator, kserve-huggingfaceserver-cuda-13.3, az, datadog-agent-fips, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes, jupyter-base-notebook,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: kserve-pmmlserver-fips, mcp-atlassian, openstack-client-2026.1, pgadmin4, kubeflow-pipelines, litellm, ansible-operator, kserve-huggingfaceserver-cuda-13.3, az, datadog-agent-fips, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes, jupyter-base-notebook,...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

CVE-2026-102274 vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: openstack-neutron-2026.1, mcp-atlassian, openstack-glance-2026.1-fips, openstack-placement-2025.2, litellm, openstack-placement-2026.1, superset, kserve-huggingfaceserver-cuda-13.3, openstack-heat-2025.2, openstack-nova-2025.1, datadog-agent-fips,...

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

EUVD-2026-89413

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878

The mcp-chrome-bridge software, in versions through 1.0.31 , contains an origin validation error within its native-server HTTP API. This vulnerability allows an attacker to bypass CORS restrictions by crafting malicious web pages. Successful exploitation enables the execution of browser automatio...

PT-2026-102894

Name of the Vulnerable Software and Affected Versions mcp-chrome-bridge versions prior to 1.0.32 Description An origin validation error exists in the native-server HTTP API that allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. CORS is a security mechanism that restricts...