Vulnerabilities

TI-2026-06269 CVE-2026-7146 · GHSA-mx5p-8rh7-x52c

AlejandroArciniegas mcp-data-vis HTTP Request server.js axios server-side request forgery

HIGH 70

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0032 Published 2026-04-27 No fix listed CWE-918

TI-2026-04654 CVE-2026-5322 · GHSA-95rp-mv97-7vqq

HIGH 70

A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00264 Published 2026-04-02 No fix listed CWE-74