Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
mcp-bridge
mcp-bridge vulnerabilities (npm)
1 vulnerability.
mcp-bridge
npm
MCP Connect has unauthenticated remote OS command execution via /bridge endpoint
GHSA-wvr4-3wq4-gpc5
9.8
Critical
March 19, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open