Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

mcp-run-python

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
PyPI

Advisories 2

  • CVE-2026-25905Medium 5.8

    Lack of isolation in mcp-run-python leads to MCP server takeover

    Affected: versions 0; through 0.0.22.

  • CVE-2026-25904Medium 5.8

    Overly permissive Deno configuration in mcp-run-python leads to SSRF

    Affected: versions 0; through 0.0.22.