beam_mcp

Hex2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting beam_mcppage 1 of 1

CVE-2026-104634LOWCVSS 2.3EG 2.30.10.1 (the fix for one version range)
2026-10-08
vulnerable: 0.1.0 ... 0.9.0 (11 versions)
Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and null tool arguments to reach the host's dispatch function as the strings "true", "false" and "nil". Aft…
CVE-2026-88257MEDIUMCVSS 5.3EG 5.30.10.1 (the fix for one version range)
2026-10-08
vulnerable: 0.1.0 ... 0.9.0 (11 versions)
Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 chec…

Check whether beam_mcp is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for beam_mcp CVEs against the assets you own.

Book a Demo →