Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: ScriptKittyOS Clear all filters
TI-2026-69499 CVE-2026-104634 · GHSA-rcm8-2hxq-3q25

JSON boolean and null tool arguments reach dispatch as strings in beam_mcp

Priority LOW 12

Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and null tool arguments to reach the host's dispatch function as the strings "true", "fa…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00341 Published 2026-10-08 Fixed in 0.10.1 CWE-704
TI-2026-69464 CVE-2026-88257 · GHSA-pgrr-g28j-jvp6

beam_mcp: nested tool argument constraints advertised but not enforced

Priority LOW 24

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00268 Published 2026-10-08 Fixed in 0.10.1 CWE-20