{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.2"}],"component":"foreman-mcp-server","cve_ids":["CVE-2026-9073"],"ecosystem":"PyPI","epss":0.00208,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7rcj-2493-83x3","id":"tcs_01M5KH9GHSMDK4S02DRYGQFASA","modified_at":"2026-10-01T17:45:03.785318217Z","published_at":"2026-10-01T16:38:28.985087Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4050","https://nvd.nist.gov/vuln/detail/CVE-2026-9073","https://github.com/theforeman/foreman-mcp-server/commit/0f166d7e3e8ec554e669da17211fdffd14740e2f","https://github.com/theforeman/foreman-mcp-server/commit/f9594e8127c77e0eed3ca482b540b88c391e8e44","https://access.redhat.com/errata/RHSA-2026:28405","https://access.redhat.com/errata/RHSA-2026:28438","https://access.redhat.com/security/cve/CVE-2026-9073","https://bugzilla.redhat.com/show_bug.cgi?id=2480151","https://github.com/InfraMCP/foreman-mcp-server","https://pypi.org/project/foreman-mcp-server","https://github.com/advisories/GHSA-7rcj-2493-83x3"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-4050","url":"https://osv.dev/vulnerability/PYSEC-2026-4050"}],"summary":"foreman-mcp-server Inserts Sensitive Information into Log File"}