Universal-tool-calling-protocol Python-utcp vulnerabilities
- universal-tool-calling-protocol python-utcp utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass 2.3 Low
- universal-tool-calling-protocol python-utcp python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects 8.4 High
- universal-tool-calling-protocol python-utcp utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass 7.1 High
- universal-tool-calling-protocol python-utcp python-utcp before 1.1.12 SSRF via Remote HTTP Manual 7.1 High
- universal-tool-calling-protocol python-utcp utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL 2.3 Low
- universal-tool-calling-protocol python-utcp universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery 5.3 Medium
- universal-tool-calling-protocol python-utcp python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol 8.3 High
- universal-tool-calling-protocol python-utcp python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection 7.7 High
- universal-tool-calling-protocol python-utcp python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol 4.7 Medium