arcade-mcp-server vulnerabilities

CVEs whose affected-version data names the arcade-mcp-server package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-66454Medium· 6.5

arcade-mcp-server Has Default Hardcoded Worker Secret That Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints

arcade-mcp-server Has Default Hardcoded Worker Secret That Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints

▾ Sunlitarcade-mcp-server · arcade-mcp-serverEPSS 0.31%via OSV

arcade-mcp-server vulnerabilities (CVEs) · VulnSea