VulnSea

hyper-mcp-rs has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.5 (medium).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
6.5
Publish → KEV
—
Last 90 days
2 prev 0

Weakness classes

Products

  • hyper-mcp 2
Follow hyper-mcp-rs:RSS feedSave a search →Embed badge ↗
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

hyper-mcp-rs vulnerabilities

CVEs affecting hyper-mcp-rs, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-108699Medium· 6.5PoC
2w ago

hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign_verify_args() accepts any signer identity and OIDC issuer by default

hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign_verify_args() accepts any signer identity and OIDC issuer by default. Attackers …

▾ Twilighthyper-mcp-rs · hyper-mcpEPSS 0.17%via NVD
CVE-2026-108698Medium· 6.5
2w ago

hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest

hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest. Attackers controlling registr…

▾ Sunlithyper-mcp-rs · hyper-mcpEPSS 0.24%via NVD
hyper-mcp-rs vulnerabilities (CVEs) · VulnSea