All products

@penpot/mcp

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCECVE-2026-45805 · GHSA-22QR-RP27-J9WM @penpot/mcp npm High Fix reported