Low
github
·
GHSA-rp72-5v5q-2446
@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url
Published Jun 26, 2026
CVSS 0.0
Summary
@cardano402/mcp-server versions `
Affected AI Products
mcp server
llm