moling vulnerabilities

CVEs whose affected-version data names the moling package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-62863Critical· 9.6

1w ago

MoLing: unauthenticated SSE and wildcard CORS expose tool sessions

MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go` dependency sets `Access-Control-Al…

▾ Midnightgojue · molingEPSS 0.31%via CVEORG