Skip to content
OpenAdvisories

Package · npm

@apify/actors-mcp-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2026-50143

    Actor MCP path authority injection leaks Apify token

    The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL…

    apify apify-mcp-server @apify/actors-mcp-server npm
  • Medium 6.1
    CVE-2026-46341

    Apify MCP server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching

    The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.9.21, the fetch-apify-docs tool in src/tools/common/fetch_apify_docs.ts validates allowlist…

    apify apify-mcp-server @apify/actors-mcp-server npm