CyberSecBulletin

JoeCastrom vulnerabilities

We track 1 vulnerability in JoeCastrom products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 27, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest JoeCastrom vulnerabilities

  • 7.3 High severity

    mcp-chat-studio: Server-Side Request Forgery

    CVE-2026-7147JoeCastrom

    A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0. Affected by this issue is some unknown functionality of the file server/routes/llm.js of the component LLM Models API. Performing a manipulation of the argument req.query.base_url results