@contentful/mcp-tools vulnerabilities (npm)

1 vulnerability.

• @contentful/mcp-tools npm Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint CVE-2026-53957 Fix available 7.7 HighAugust 19, 2026