@modelcontextprotocol/inspector vulnerabilities (npm)

2 vulnerabilities.

• @modelcontextprotocol/inspector npm MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server CVE-2025-58444 Fix available 8.6 HighSeptember 8, 2025
• @modelcontextprotocol/inspector npm MCP Inspector proxy server lacks authentication between the Inspector client and proxy CVE-2025-49596 Public exploitFix available EPSS 44.5% 9.4 CriticalJune 13, 2025