GHSA-42VR-XJ54-VC7V vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, tritonserver-backend-vllm-cuda-13.0, openstack-keystone-2025.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2,...

CVE-2026-101918 vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, tritonserver-backend-vllm-cuda-13.0, openstack-keystone-2025.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2,...

GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, metaflow-service-fips, mlrun-fips, openstack-keystone-2025.2-fips, pgadmin4-fips, kserve-xgbserver-fips, ansible-operator-fips, kserve-lgbserver, kserve-lgbserver-fips, kubeflow, open-webui, pgadmin4, datadog-agent-fips,...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, metaflow-service-fips, mlrun-fips, openstack-keystone-2025.2-fips, pgadmin4-fips, kserve-xgbserver-fips, ansible-operator-fips, kserve-lgbserver, kserve-lgbserver-fips, kubeflow, open-webui, pgadmin4, datadog-agent-fips,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, metaflow-service-fips, mlrun-fips, openstack-keystone-2025.2-fips, pgadmin4-fips, kserve-xgbserver-fips, ansible-operator-fips, kserve-lgbserver, kserve-lgbserver-fips, kubeflow, open-webui, pgadmin4, datadog-agent-fips,...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, metaflow-service-fips, mlrun-fips, openstack-keystone-2025.2-fips, pgadmin4-fips, kserve-xgbserver-fips, ansible-operator-fips, kserve-lgbserver, kserve-lgbserver-fips, kubeflow, open-webui, pgadmin4, datadog-agent-fips,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

CVE-2026-102274 vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: metaflow-service-fips, openstack-glance-2026.1-fips, openstack-heat-2026.1, openstack-placement-2025.1, datahub-ingestion-fips, open-webui, openstack-glance-2025.1, superset, openstack-nova-2025.2, datadog-agent-fips, mcp-atlassian, authentik, kserve,...

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

EUVD-2026-89413

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878

The mcp-chrome-bridge software, in versions through 1.0.31 , contains an origin validation error within its native-server HTTP API. This vulnerability allows an attacker to bypass CORS restrictions by crafting malicious web pages. Successful exploitation enables the execution of browser automatio...

PT-2026-102894

Name of the Vulnerable Software and Affected Versions mcp-chrome-bridge versions prior to 1.0.32 Description An origin validation error exists in the native-server HTTP API that allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. CORS is a security mechanism that restricts...