universal-tool-calling-protocol python-utcp vulnerabilities

Newest CVEs

• CVE-2026-101061

  utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass

  universal-tool-calling-protocol · python-utcp

  Low2.3
• CVE-2026-101060

  python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects

  universal-tool-calling-protocol · python-utcp

  High8.4
• CVE-2026-101059

  utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass

  universal-tool-calling-protocol · python-utcp

  High7.1
• CVE-2026-101058

  python-utcp before 1.1.12 SSRF via Remote HTTP Manual

  universal-tool-calling-protocol · python-utcp

  High7.1
• CVE-2026-101057

  utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL

  universal-tool-calling-protocol · python-utcp

  Low2.3
• CVE-2026-12210

  universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery

  universal-tool-calling-protocol · python-utcp

  Medium5.3
• CVE-2026-45369

  python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

  universal-tool-calling-protocol · python-utcp

  High8.3
• CVE-2026-45370

  python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection

  universal-tool-calling-protocol · python-utcp

  High7.7
• CVE-2026-44661

  python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol

  universal-tool-calling-protocol · python-utcp

  Medium4.7