@modelcontextprotocol/inspector
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server | @modelcontextprotocol/inspector | npm | High | Fix reported | |
| MCP Inspector proxy server lacks authentication between the Inspector client and proxy | @modelcontextprotocol/inspector | npm | Critical | Fix reported |