rowboatlabs rowboat

• CVE-2026-86122 Medium 5.0 Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server 0.4%
• CVE-2026-84856 Medium 5.3 rowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of service 0.7%
• CVE-2026-6635 High 7.3 rowboatlabs rowboat tools_webhook app.py tool_call improper authentication 0.5%
• CVE-2025-7115 High 7.3 rowboatlabs rowboat Session route.ts PUT missing authentication 0.5%