VYPR

PromptShopMCP

by Kira Pgr

CVEs (1)

  • CVE-2026-74842MedAug 17, 2026
    risk 0.41cvss 6.3epss

    A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function download_image of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument image_url results in server-side…