VYPR

frogman

by GitHub

CVEs (1)

  • CVE-2026-46513Jul 16, 2026
    risk 0.00cvss epss 0.00

    Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hex(random_bytes(32)) strings in oc_api_tokens, and Frogman.class.php:78 authenticated the X-Frogman-Token header by…