lokka vulnerabilities

CVEs whose affected-version data names the lokka package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-58201High· 8.7

1w ago

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled …

▾ Twilightmerill · lokkaEPSS 0.28%via NVD