CRITICALnpm
GHSA-7f8r-222p-6f5g· CVE-2025-49596MCP Inspector proxy server lacks authentication between the Inspector client and proxy
Modified: 7/9/2025
package
npm/@modelcontextprotocol/inspector
pkg:npm/%40modelcontextprotocol/inspector
HIGHnpm
GHSA-g9hg-qhmf-q45m· CVE-2025-58444MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server
Modified: 9/26/2025