Universal-tool-calling-protocol vulnerabilities

Products

• Python-utcp 9

Newest

• universal-tool-calling-protocol python-utcp utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass CVE-2026-101061 2.3 LowSeptember 27, 2026
• universal-tool-calling-protocol python-utcp python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects CVE-2026-101060 8.4 HighSeptember 27, 2026
• universal-tool-calling-protocol python-utcp utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass CVE-2026-101059 7.1 HighSeptember 27, 2026
• universal-tool-calling-protocol python-utcp python-utcp before 1.1.12 SSRF via Remote HTTP Manual CVE-2026-101058 7.1 HighSeptember 27, 2026
• universal-tool-calling-protocol python-utcp utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL CVE-2026-101057 2.3 LowSeptember 27, 2026
• universal-tool-calling-protocol python-utcp universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery CVE-2026-12210 Fix available 5.3 MediumJune 15, 2026
• universal-tool-calling-protocol typescript-utcp typescript-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol CVE-2026-45366 Fix available 4.7 MediumMay 14, 2026
• universal-tool-calling-protocol python-utcp python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol CVE-2026-45369 Fix available 8.3 HighMay 14, 2026
• universal-tool-calling-protocol python-utcp python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection CVE-2026-45370 Fix available 7.7 HighMay 14, 2026
• universal-tool-calling-protocol python-utcp python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol CVE-2026-44661 Fix available 4.7 MediumMay 7, 2026