PyPI/code-index-mcp CVE-2026-10692: medium 4.3, EPSS 0.31%

Code Index MCP is vulnerable to Uncontrolled Resource Consumption

Action: Upgrade code-index-mcp to 2.14.1 or later.

pip install code-index-mcp==2.14.1

Affected

Fixed versions

Sources

• osv: GHSA-647r-72hf-4vmh
• https://nvd.nist.gov/vuln/detail/CVE-2026-10692
• https://github.com/johnhuang316/code-index-mcp/issues/84
• https://github.com/johnhuang316/code-index-mcp/commit/25bc02fac74051ddae15ce79e952f00211b1ea6b
• https://github.com/johnhuang316/code-index-mcp
• https://github.com/johnhuang316/code-index-mcp/releases/tag/v2.14.1
• https://vuldb.com/cve/CVE-2026-10692
• https://vuldb.com/submit/830786
• https://vuldb.com/vuln/367961
• https://vuldb.com/vuln/367961/cti

CVE-2026-10692 · published 2026-06-03T00:30:27Z · modified 2026-07-13T16:42:52.830314188Z · JSON