Skip to content
OpenAdvisories

Package · npm

@sylphx/pdf-reader-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-62264

    PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

    PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server, `@sylphx/pdf-reader-mcp` reads `MCP_API_KEY` and logs that `X-API-Key` authentic…

    SylphxAI pdf-reader-mcp @sylphx/pdf-reader-mcp npm