Advisories · Technology
universal-tool-calling-protocol python-utcp.
Every CVE that names universal-tool-calling-protocol python-utcp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass
- universal-tool-calling-protocol python-utcp
- Server-side request forgery (SSRF)
- CVSS 8.4 High
python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects
- universal-tool-calling-protocol python-utcp
- Server-side request forgery (SSRF)
- CVSS 7.1 High
utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass
- universal-tool-calling-protocol python-utcp
- Server-side request forgery (SSRF)
- CVSS 7.1 High
python-utcp before 1.1.12 SSRF via Remote HTTP Manual
- universal-tool-calling-protocol python-utcp
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL
- universal-tool-calling-protocol python-utcp
- Weak cryptography or TLS