CyberSecBulletin

Atototo vulnerabilities

We track 1 vulnerability in Atototo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 9, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest Atototo vulnerabilities

  • 7.3 High severity

    api-lab-mcp: Server-Side Request Forgery

    CVE-2026-5832Atototo

    A weakness has been identified in atototo api-lab-mcp up to 0.2.1. This affects the function analyze_api_spec/generate_test_scenarios/test_http_endpoint of the file src/mcp/http-server.ts of the component HTTP Interface. This manipulation of the argument sourc