Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-6f5r-5672-72j7@andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by defaultAlso filed as CVE-2026-54504 high Not flagged Jul 15, 2026

Versions in the registry

1.15.3 (listed), 1.15.2, 1.15.1