{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.2"}],"component":"foreman-mcp-server","cve_ids":["CVE-2026-9073"],"ecosystem":"PyPI","epss":0.00208,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7rcj-2493-83x3","id":"tcs_01M5KF6K0H2T0DQDVW6XVW046T","modified_at":"2026-10-01T17:55:52.950499003Z","published_at":"2026-06-23T21:30:33Z","references":["https://osv.dev/vulnerability/GHSA-7rcj-2493-83x3","https://nvd.nist.gov/vuln/detail/CVE-2026-9073","https://github.com/theforeman/foreman-mcp-server/commit/0f166d7e3e8ec554e669da17211fdffd14740e2f","https://github.com/theforeman/foreman-mcp-server/commit/f9594e8127c77e0eed3ca482b540b88c391e8e44","https://access.redhat.com/errata/RHSA-2026:28405","https://access.redhat.com/errata/RHSA-2026:28438","https://access.redhat.com/security/cve/CVE-2026-9073","https://bugzilla.redhat.com/show_bug.cgi?id=2480151","https://github.com/InfraMCP/foreman-mcp-server"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-7rcj-2493-83x3","url":"https://osv.dev/vulnerability/GHSA-7rcj-2493-83x3"}],"summary":"foreman-mcp-server Inserts Sensitive Information into Log File"}