CO
Product
contentful-mcp-server
by contentful · last CVE Sep 15, 2026
1
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add contentful-mcp-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53957
7.7
0%
Sep 15
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint
Affected: < 1.7.19
Showing 1