AlejandroArciniegas vulnerabilities
We track 2 vulnerabilities in AlejandroArciniegas products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 27, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest AlejandroArciniegas vulnerabilities
- 7.3 High severity
mcp-data-vis: Server-Side Request Forgery
A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Hand
- 7.3 High severity
mcp-data-vis: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d. This affects the function Request of the file src/servers/database/server.js of the component MCP Handler. The