CVE-2026-27203
1 advisory.
npm/ebay-mcp CVE-2026-27203: high 8.3, EPSS 0.55%
eBay API MCP Server Affected by Environment Variable Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.7.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-97rm-xj73-33jh
- https://github.com/YosefHayim/ebay-mcp/security/advisories/GHSA-97rm-xj73-33jh
- https://nvd.nist.gov/vuln/detail/CVE-2026-27203
- https://github.com/YosefHayim/ebay-mcp/commit/aab0bda75ea9dd27aa37d0d8524d7cf41b3c4a9a
- https://github.com/YosefHayim/ebay-mcp
CVE-2026-27203 · published · modified · JSON