https://mcpwatchman.com/feed/high-severity.xml Critical and high-severity findings that appeared on a server page already being tracked, newest first. A page's findings at its first tracked scan are its baseline and are not announced; tracking began 2026-10-10. 2026-10-16T00:00:00Z mcpwatchmanhttps://mcpwatchman.com/ tag:mcpwatchman.com,2026:io-github-zw008-vmware-pilot%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.28.1 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-zw008-vmware-pilot/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.zw008/vmware-pilot's page</a></p> tag:mcpwatchman.com,2026:io-github-vortiago-mcp-tekna%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.26.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-vortiago-mcp-tekna/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.Vortiago/mcp-tekna's page</a></p> tag:mcpwatchman.com,2026:io-github-sandraschi-leanforge-mcp%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.27.2 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>transitive, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-sandraschi-leanforge-mcp/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.sandraschi/leanforge-mcp's page</a></p> tag:mcpwatchman.com,2026:io-github-penny4nonsense-mcp-pymupdf%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.28.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-penny4nonsense-mcp-pymupdf/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.penny4nonsense/mcp-pymupdf's page</a></p> tag:mcpwatchman.com,2026:io-github-pdf4me-pdf4me-mcp%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.27.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>transitive, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-pdf4me-pdf4me-mcp/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.pdf4me/pdf4me-mcp's page</a></p> tag:mcpwatchman.com,2026:io-github-jgalea-telegram-mcp%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.26.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-jgalea-telegram-mcp/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.jgalea/telegram-mcp's page</a></p> tag:mcpwatchman.com,2026:io-github-gulmezeren2-byte-ihalent%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.28.1 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-gulmezeren2-byte-ihalent/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.gulmezeren2-byte/ihalent's page</a></p> tag:mcpwatchman.com,2026:io-github-fato07-log-analyzer-mcp%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.25.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-fato07-log-analyzer-mcp/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.Fato07/log-analyzer-mcp's page</a></p> tag:mcpwatchman.com,2026:io-github-easytocloud-mac-letterhead%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fdxt%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 2.0.0 — GHSA-84m7-p3x7-pcfv in dxt/uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 2.2.0</p><p>dxt/uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-easytocloud-mac-letterhead/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-dxt-uv-lock-0-19vmt9q">The finding on io.github.easytocloud/mac-letterhead's page</a></p> tag:mcpwatchman.com,2026:io-github-easytocloud-mac-letterhead%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 2.1.1 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 2.2.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-easytocloud-mac-letterhead/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.easytocloud/mac-letterhead's page</a></p> tag:mcpwatchman.com,2026:io-github-cifero74-mcp-apple-music%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.26.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-cifero74-mcp-apple-music/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.Cifero74/mcp-apple-music's page</a></p> tag:mcpwatchman.com,2026:io-github-cejor6-kalshi-mcp-server%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.27.2 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>transitive, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-cejor6-kalshi-mcp-server/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.cejor6/kalshi-mcp-server's page</a></p> tag:mcpwatchman.com,2026:io-github-aliakhtari78-spotifyscraper%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.28.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/io-github-aliakhtari78-spotifyscraper/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on io.github.AliAkhtari78/spotifyscraper's page</a></p> tag:mcpwatchman.com,2026:ai-name-nameai-mcp%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 2.1.0 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 2.2.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/ai-name-nameai-mcp/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on ai.name/nameai-mcp's page</a></p> tag:mcpwatchman.com,2026:ai-mcpcap-mcpcap%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.28.1 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>transitive, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/ai-mcpcap-mcpcap/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on ai.mcpcap/mcpcap's page</a></p> tag:mcpwatchman.com,2026:ai-bowmark-bowmark%2Fdependency_health%2Fmcp%3AGHSA-84m7-p3x7-pcfv%2Fuv.lock 2026-10-16T00:00:00Z

high Dependency Health finding mcp 1.28.1 — GHSA-84m7-p3x7-pcfv in uv.lock, first seen 2026-10-16.

<p>direct, CVSS 7.5, fixed in 1.30.0</p><p>uv.lock</p><p><a href="https://mcpwatchman.com/servers/ai-bowmark-bowmark/#finding-dependency-health-mcp-ghsa-84m7-p3x7-pcfv-uv-lock-0-38px39">The finding on ai.bowmark/bowmark's page</a></p>