Pipeboard-co vulnerabilities
We track 3 vulnerabilities in Pipeboard-co products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
Latest Pipeboard-co vulnerabilities
- 8.3 High severity
meta-ads-mcp: Server-Side Request Forgery
Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes an attacker-controlled image_url to try_multiple_download_methods() in meta_ads_mc
- 7.4 High severity
meta-ads-mcp: Improper Authentication
Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_integration.py rejects HTTP MCP requests only when both auth_token and pipeboard_token
- 9.1 Critical severity
meta-ads-mcp: Improper Authentication
Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamable HTTP requests to do