Algovate vulnerabilities
We track 1 vulnerability in Algovate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Algovate vulnerabilities
- 7.3 High severity
xhs-mcp: Server-Side Request Forgery
A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publish_content of the file src/server/mcp.server.ts of the component MCP Interface. Performing a manipulation of the argument media_paths results in server-side request forger