Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.
Library:
meta-ads-mcp
CVE-2026-54547
HIGH
CVSS 7.4
Verified Advisory
Jul 17, 2026
Authentication bypass in meta-ads-mcp AuthInjectionMiddleware (CVE-2026-54547)
An authentication bypass vulnerability in `AuthInjectionMiddleware` within the `meta-ads-mcp` package allows an unauthenticated network attacker to send an HTTP request bearing only the `X-Pipeboard-Token` header with...
Fixed in 1.0.115
Authentication Bypass
Python
Docker
CVE-2026-54549
HIGH
CVSS 8.3
Verified Advisory
Jul 17, 2026
Server-Side Request Forgery in meta-ads-mcp (CVE-2026-54549)
CVE-2026-54549 is a Server-Side Request Forgery (SSRF) vulnerability in the `upload_ad_image` MCP tool of the `meta-ads-mcp` package, in which an attacker-controlled `image_url` parameter is passed directly to `httpx....
Fixed in 1.0.115
SSRF
Microsoft
Canonical
Python