Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
mcp-sanitizer
mcp-sanitizer vulnerabilities (npm)
2 vulnerabilities.
mcp-sanitizer
npm
mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6
GHSA-4mfg-r38w-w8fg
Fix available
8.2
High
October 28, 2026
mcp-sanitizer
npm
mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
GHSA-7w82-6f9j-v9jp
Fix available
7.5
High
October 28, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open