Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@cardano402/mcp-server
@cardano402/mcp-server vulnerabilities (npm)
1 vulnerability.
@cardano402/mcp-server
npm
@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url
GHSA-rp72-5v5q-2446
Fix available
0.0
None
June 26, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open