Advisory catalogGHSA-v3f4-w7r7-v3hm
GHSA-v3f4-w7r7-v3hmPublished
Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-58497 · Microsoft / collected KEV context
cve-program · CVE-2026-58497
- https://github.com/olo-dot-io/Uni-CLI/security/advisories/GHSA-v3f4-w7r7-v3hm
- https://github.com/olo-dot-io/Uni-CLI/releases/tag/v0.225.2
osv · GHSA-v3f4-w7r7-v3hm
Related operational evidence
Explicit CVE identifiers- Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests · Newly collected advisory · 23 Oct 2026