Log in Start free

@contentful

Products

ProductCVEsExploitedLatest
contentful-mcp-server1–Sep 15, 2026
mcp-server1–Sep 15, 2026
mcp-tools1–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-53957 High 7.7 Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint 0.4%
  • CVE-2026-53957 High 7.7 Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint 0.4%
  • CVE-2026-53957 High 7.7 Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint 0.4%