Skip to content
OpenAdvisories

Vendor

JoeCastrom

1 known vulnerabilities.

Products

mcp-chat-studio 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-7147

    JoeCastrom mcp-chat-studio LLM Models API llm.js server-side request forgery

    A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0. Affected by this issue is some unknown functionality of the file server/routes/llm.js of the component LLM Models API. Performing a manipulation of the argument req.query.base_url results…

    JoeCastrom mcp-chat-studio