Arcadeai Arcade-mcp vulnerabilities

• arcadeai arcade-mcp Arcade MCP Default Hardcoded Worker Secret Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints CVE-2025-66454 Fix available 6.5 MediumDecember 2, 2025