@contentful vulnerabilities

Products

• Mcp-server 4

Newest

• @contentful mcp-server, tsparticles +1 more tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process CVE-2026-76892 8.7 HighNovember 4, 2026
• @contentful mcp-server, tsparticles +1 more tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients CVE-2026-76893 6.9 MediumNovember 4, 2026
• @contentful mcp-server, tsparticles +1 more tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS CVE-2026-63655 7.5 HighNovember 4, 2026
• @contentful mcp-server, mcp-tools, contentful contentful-mcp-server +2 more Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint CVE-2026-53957 Fix available 7.7 HighAugust 19, 2026