Skip to content
OpenAdvisories

Vendor

jkawamoto

1 known vulnerabilities.

Products

mcp-florence2 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-19984

    jkawamoto mcp-florence2 __init__.py get_images server-side request forgery

    A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated r…

    jkawamoto mcp-florence2