CVE-2026-81099 Blast Radius

MEDIUM • CVSS 6.8tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServer.ts called the shared h…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-81099.

Start Free Scan →← Back to CVE-2026-81099