CVE-2026-58500
1 advisory.
npm/appium-mcp CVE-2026-58500: high 8.2, EPSS 0.40%
appium-mcp: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)
Action: Upgrade appium-mcp to 1.85.10 or later.
npm i appium-mcp@1.85.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.85.10 | - |
Fixed versions
| 1.85.10 |
Sources
- osv: GHSA-x975-rgx4-5fh4
- https://github.com/appium/appium-mcp/security/advisories/GHSA-x975-rgx4-5fh4
- https://github.com/appium/appium-mcp/commit/e222bbbd6fe2b656a320efcd143563f08061a83d
- https://github.com/appium/appium-mcp
- https://github.com/appium/appium-mcp/releases/tag/v1.85.10
CVE-2026-58500 · published · modified · JSON