Skip to content
OpenAdvisories

Vendor

Airtable

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint

    The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.…