{"action":"Upgrade code-index-mcp to 2.14.1 or later.","affected":[{"fixed":"2.14.1","introduced":"0"}],"component":"code-index-mcp","cve_ids":["CVE-2026-10692"],"ecosystem":"PyPI","epss":0.0031,"exploited":false,"fixed_versions":["2.14.1"],"ghsa_id":"GHSA-647r-72hf-4vmh","id":"tcs_01M5KF2C13RZVYAJ0RF0F8N9BP","modified_at":"2026-07-13T16:42:52.830314188Z","published_at":"2026-06-03T00:30:27Z","references":["https://osv.dev/vulnerability/GHSA-647r-72hf-4vmh","https://nvd.nist.gov/vuln/detail/CVE-2026-10692","https://github.com/johnhuang316/code-index-mcp/issues/84","https://github.com/johnhuang316/code-index-mcp/commit/25bc02fac74051ddae15ce79e952f00211b1ea6b","https://github.com/johnhuang316/code-index-mcp","https://github.com/johnhuang316/code-index-mcp/releases/tag/v2.14.1","https://vuldb.com/cve/CVE-2026-10692","https://vuldb.com/submit/830786","https://vuldb.com/vuln/367961","https://vuldb.com/vuln/367961/cti"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-647r-72hf-4vmh","url":"https://osv.dev/vulnerability/GHSA-647r-72hf-4vmh"}],"summary":"Code Index MCP is vulnerable to Uncontrolled Resource Consumption"}