kazuph
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| mcp-docs-rag | 1 | – | Mar 28, 2026 |
| mcp-fetch | 1 | – | Aug 26, 2026 |
Exploited and recent CVEs
- CVE-2026-80347 mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets 0.4%
- CVE-2026-5007 kazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository os command injection 0.7%