pixelsock vulnerabilities

Products

• directus-mcp 1

Latest pixelsock CVEs

Newest publication first

1. CVE-2026-7729 pixelsock directus-mcp MCP index.ts validateUrl server-side request forgery

   Published 2026-05-04

   Medium·CVSS 5.3

   A security flaw has been discovered in pixelsock directus-mcp 1.0.0. This issue affects the function validateUrl of the file index.ts of the component MCP Interface. Performing a manipulation of the argument fileUrl results in server-side request forgery. The attack may be initia...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.