Skip to content
OpenAdvisories

Vendor

oatpp

2 known vulnerabilities.

Products

Oat++ 1 oatpp-mcp 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2025-6515

    Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackers

    The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP s…

    oatpp oatpp-mcp
  • Medium 5.3
    CVE-2025-6566

    oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow

    A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can…

    oatpp Oat++