HIGH7.4PyPI
GHSA-2v2f-mvfg-ph56· CVE-2026-54547, PYSEC-2026-3484meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
Modified: 7/23/2026
package
PyPI/meta-ads-mcp
pkg:pypi/meta-ads-mcp
HIGH8.3PyPI
GHSA-45gf-fjxp-cjpq· CVE-2026-54549, PYSEC-2026-3485meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
Modified: 7/23/2026
CRITICAL9.1PyPI
GHSA-9gw6-46qc-99vr· CVE-2026-48039, PYSEC-2026-413Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Modified: 8/7/2026
HIGH7.4PyPI
PYSEC-2026-3484· CVE-2026-54547, GHSA-2v2f-mvfg-ph56meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
Modified: 7/23/2026
HIGH8.3PyPI
PYSEC-2026-3485· CVE-2026-54549, GHSA-45gf-fjxp-cjpqmeta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
Modified: 7/23/2026
CRITICAL9.1PyPI
PYSEC-2026-413· CVE-2026-48039, GHSA-9gw6-46qc-99vrMeta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Modified: 7/13/2026