@penpot/mcp vulnerabilities (npm)

1 vulnerability.

• @penpot/mcp npm Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE CVE-2026-45805 Public exploitFix available 8.8 HighMay 19, 2026