Universal-tool-calling-protocol Typescript-utcp vulnerabilities

• universal-tool-calling-protocol typescript-utcp typescript-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol CVE-2026-45366 Fix available 4.7 MediumMay 14, 2026