Gavin Zhong

**Name of the Vulnerable Software and Affected Versions** MCP Inspector versions prior to 0.16.6 **Description** The MCP Inspector, a developer tool for testing and debugging MCP servers, is susceptible to a cross-site scripting issue. This issue occurs when connecting to untrusted remote MCP servers with a malicious redirect URI. Exploitation of this issue could allow interaction with the inspector proxy, potentially triggering arbitrary command execution. **Recommendations** Update MCP Inspector to version 0.16.6.

Name of the Vulnerable Software and Affected Versions: wong2 mcp-cli version 1.13.0 Description: A flaw has been identified in the `redirectToAuthorization` function within the oAuth Handler component, specifically in the file `/src/oauth/provider.js`. This manipulation results in OS command injection, potentially allowing remote execution of commands. The attack is considered to have high complexity and is reportedly difficult to exploit. The exploit has been published and may be utilized. The vendor was contacted regarding this disclosure but did not respond. Recommendations: Update to a version with commit 3562966 or later. As a temporary workaround, consider disabling the `redirectToAuthorization` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** comfyanonymous comfyui version 0.3.40 **Description** A vulnerability was found in the function `set attr` of the file `/comfy/utils.py`, which can lead to dynamically-determined object attributes. The attack can be launched remotely, but it has a high complexity and is considered difficult to exploit. The exploit has been disclosed to the public. **Recommendations** For version 0.3.40, consider disabling the `set attr` function in the `/comfy/utils.py` file as a temporary workaround until a patch is available. Restrict access to the `/comfy/utils.py` file to minimize the risk of exploitation. Avoid using the `set attr` function remotely until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** comfyanonymous comfyui versions up to 0.3.39 **Description** A vulnerability was found in the file /upload/image of the component, allowing for cross-site scripting through the manipulation of the `image` argument. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond. **Recommendations** For versions up to 0.3.39, as a temporary workaround, consider disabling the `/upload/image` endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using the `image` argument in the affected functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Redash versions up to 10.1.0/25.1.0 **Description** A critical issue affects the `run query` function of the `/query runner/python.py` file in the `getattr` Handler component, leading to a sandbox issue. The exploit has been disclosed publicly and may be used. The vendor was contacted about this disclosure but did not respond. **Recommendations** For Redash versions up to 10.1.0/25.1.0, as a temporary workaround, consider disabling the `run query` function until a patch is available. Restrict access to the `/query runner/python.py` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** fossasia open-event-server version 1.19.1 **Description** A problematic issue has been found in the Mail Verification Handler component, specifically affecting the `send email change user email` function. This issue leads to reliance on obfuscation or encryption of security-relevant inputs without integrity checking, allowing for potential remote attacks. The complexity of an attack is rather high, and the exploitation is known to be difficult. **Recommendations** For fossasia open-event-server version 1.19.1, consider disabling the `send email change user email` function until a patch is available to prevent potential exploitation. Restrict access to the Mail Verification Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** gradio-app gradio versions up to 5.29.1 **Description** A problematic vulnerability has been found in the CORS Handler component, specifically affecting the `is valid origin` function. The issue arises from the manipulation of the `localhost aliases` argument, leading to an origin validation error. This vulnerability can be exploited remotely, with a relatively high complexity of attack and difficult exploitability. The exploit has been publicly disclosed. **Recommendations** For versions up to 5.29.1, as a temporary workaround, consider restricting the use of the `is valid origin` function in the CORS Handler component until a patch is available. Additionally, be cautious when using the `localhost aliases` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** aimhubio aim versions up to 3.29.1 **Description** A critical vulnerability was found in the aimhubio aim software. This issue affects the `RestrictedPythonQuery` function of the `/aim/storage/query.py` file in the `run view Object Handler` component. The manipulation of the `Query` argument leads to a sandbox issue, which can be initiated remotely. The exploit has been disclosed to the public. **Recommendations** For aimhubio aim versions up to 3.29.1, as a temporary workaround, consider disabling the `RestrictedPythonQuery` function until a patch is available. Restrict access to the `run view Object Handler` component to minimize the risk of exploitation. Avoid using the `Query` argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** docarray versions up to 0.40.1 **Description** A critical issue affects the ` getitem ` function of the `/docarray/data/torch dataset.py` file in the Web API component. This issue leads to improperly controlled modification of object prototype attributes, also known as 'prototype pollution'. The attack can be launched remotely. **Recommendations** For versions up to 0.40.1, as a temporary workaround, consider disabling the ` getitem ` function until a patch is available. Restrict access to the `/docarray/data/torch dataset.py` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Zylon PrivateGPT versions up to 0.6.2 **Description** A problematic issue was found in Zylon PrivateGPT, affecting an unknown part of the file settings.yaml. The manipulation of the `allow origins` argument leads to a permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. **Recommendations** For Zylon PrivateGPT versions up to 0.6.2, as a temporary workaround, consider restricting the `allow origins` argument to trusted domains until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** nortikin Sverchok version 1.3.0 **Description** A problematic issue was found in the function `SvSetPropNodeMK2` of the file `sverchok/nodes/object nodes/getsetprop mk2.py` of the component Set Property Mk2 Node. This issue leads to improperly controlled modification of object prototype attributes, also known as 'prototype pollution'. The attack can be launched remotely. The exploit has been publicly disclosed. **Recommendations** For nortikin Sverchok version 1.3.0, as a temporary workaround, consider disabling the `SvSetPropNodeMK2` function until a patch is available. Restrict access to the Set Property Mk2 Node component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.