Skip to content
OpenAdvisories

Package · Hex

beam_mcp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.3
    CVE-2026-104634

    beam_mcp: JSON boolean and null tool arguments reach dispatch as strings

    Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and null tool arguments to reach the host's dispatch function as the strings "true", "false" and "nil". After BeamMCP.Schema.va…

    ScriptKittyOS beam_mcp beam_mcp Hex
  • Medium 5.3
    CVE-2026-88257

    beam_mcp: nested tool argument constraints advertised but not enforced

    Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, …

    ScriptKittyOS beam_mcp beam_mcp Hex