CVE-2026-58497
1 advisory.
npm/@zenalexa/unicli CVE-2026-58497: high, EPSS 0.27%
Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests
Action: Upgrade @zenalexa/unicli to 0.225.2 or later.
npm i @zenalexa/unicli@0.225.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.225.2 | - |
Fixed versions
| 0.225.2 |
Sources
- osv: GHSA-v3f4-w7r7-v3hm
- https://github.com/olo-dot-io/Uni-CLI/security/advisories/GHSA-v3f4-w7r7-v3hm
- https://github.com/olo-dot-io/Uni-CLI
CVE-2026-58497 · published · modified · JSON