HIGH8.1npm
GHSA-6gr2-qh89-hxwm· CVE-2026-50143Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token
Modified: 9/10/2026
package
npm/@apify/actors-mcp-server
pkg:npm/%40apify/actors-mcp-server
MEDIUM6.1npm
GHSA-jwp7-wg77-3w9v· CVE-2026-46341Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching
Modified: 9/10/2026