Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@kozou/core
@kozou/core vulnerabilities (npm)
1 vulnerability.
@kozou/core
npm
Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure)
GHSA-v52w-28xh-v562
Fix available
8.4
High
June 19, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open