Description
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch() forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
agentfront mcp-from-openapi
Default version status: unaffected
2.5.0 to < 2.9.0affected
pkg:npm/mcp-from-openapiReferences
- https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v ↗
- https://github.com/agentfront/mcp-from-openapi/pull/42 ↗
- https://github.com/agentfront/mcp-from-openapi/commit/47fb7a655de33958b0c923490ab244343eb5fc44 ↗
- https://github.com/agentfront/mcp-from-openapi/releases/tag/v2.9.0 ↗
- https://www.vulncheck.com/advisories/mcp-from-openapi-from-2.5.0-before-2.9.0-credential-leak-via-cross-origin-redirects ↗