HIGH7.4PyPI
GHSA-2v2f-mvfg-ph56· CVE-2026-54547, PYSEC-2026-3484meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
Modified: 7/23/2026
package
pkg:pypi/meta-ads-mcp
meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
Modified: 7/23/2026
meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
Modified: 7/23/2026
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Modified: 8/7/2026
meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
Modified: 7/23/2026
meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
Modified: 7/23/2026
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Modified: 7/13/2026