merill has 2 CVEs on record. 1 was published in the last 90 days. The median CVSS is 8.7 (high).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.7
- Publish → KEV
- —
- Last 90 days
- 1 prev 1
Weakness classes
Products
- @merill/lokka 1
- lokka 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
merill vulnerabilities
CVEs affecting merill, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-58201High· 8.7Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services
Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled …
▾ Twilightmerill · lokkaEPSS 0.28%via NVD
GHSA-g2gw-q38m-vjfcHighLokka: Azure Resource Manager URL path validation issue
Lokka: Azure Resource Manager URL path validation issue
▾ Twilightmerill · @merill/lokkavia GHSA