Skip to content
OpenAdvisories

Package · npm

camofox-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-7hgr-7h44-33w2

    CamoFox MCP: Unauthenticated HTTP MCP browser-control surface

    # Unauthenticated HTTP MCP browser-control surface in `camofox-mcp` ## Summary `camofox-mcp` exposed a Streamable HTTP MCP endpoint at `/mcp` with rate limiting but no inbound MCP-layer authentication. When HTTP mode was enabled, any client that could reach `…

    camofox-mcp npm