Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-rxw2-pc8j-vxwmfast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protectionAlso filed as CVE-2026-52830, PYSEC-2026-2473 critical Not flagged Jul 2, 2026

Versions in the registry

0.44.1 (listed)