{"action":"Upgrade netlicensing-mcp to 0.1.8 or later.","affected":[{"fixed":"0.1.8","introduced":"0"}],"component":"netlicensing-mcp","cve_ids":["CVE-2026-57496"],"ecosystem":"PyPI","epss":0.00435,"exploited":false,"fixed_versions":["0.1.8"],"ghsa_id":"GHSA-hxpf-9xvq-wph8","id":"tcs_01M5KFMRMR12B5WX5QCB3SRWYB","modified_at":"2026-10-15T18:45:10.600088359Z","published_at":"2026-06-18T17:22:02Z","references":["https://osv.dev/vulnerability/GHSA-hxpf-9xvq-wph8","https://github.com/Labs64/NetLicensing-MCP/security/advisories/GHSA-hxpf-9xvq-wph8","https://nvd.nist.gov/vuln/detail/CVE-2026-57496","https://github.com/Labs64/NetLicensing-MCP/pull/6","https://github.com/Labs64/NetLicensing-MCP/commit/b8fd0ea76d533202573eb24add9fb2fbd9331496","https://github.com/Labs64/NetLicensing-MCP","https://github.com/Labs64/NetLicensing-MCP/releases/tag/0.1.8","https://github.com/pypa/advisory-database/tree/main/vulns/netlicensing-mcp/PYSEC-2026-3489.yaml"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-hxpf-9xvq-wph8","url":"https://osv.dev/vulnerability/GHSA-hxpf-9xvq-wph8"}],"summary":"netlicensing-mcp: REST Path Traversal Bypasses Token Redaction"}