Skip to content
OpenAdvisories

Vendor

arikusi

2 known vulnerabilities.

Products

deepseek-mcp-server 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-55605

    @arikusi/deepseek-mcp-server Missing Authentication on Self-Hosted HTTP MCP Endpoint

    DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.8.0, the self-hosted HTTP transport of `@arikusi/deepseek-mcp-server` exposes `POST /mcp` without any authentication: `createMcpExpressApp` is called withou…

    arikusi deepseek-mcp-server @arikusi/deepseek-mcp-server npm