meta-ads-mcp vulnerabilities (PyPI)

3 vulnerabilities.

• meta-ads-mcp PyPI Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token CVE-2026-54547 Fix available 7.4 HighJuly 17, 2026
• meta-ads-mcp PyPI Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch CVE-2026-54549 Fix available 8.3 HighJuly 17, 2026
• meta-ads-mcp PyPI Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token CVE-2026-48039 Fix available 9.1 CriticalJune 11, 2026