SylphxAI vulnerabilities
We track 1 vulnerability in SylphxAI products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest SylphxAI vulnerabilities
- 7.5 High severity
pdf-reader-mcp: Exposure of Sensitive Information to an Unauthorized Actor
PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server, `@sylphx/pdf-reader-mcp` reads `MCP_API_KEY` and logs that `X-API-Key` authentica