mcp-context7

Direct Vulnerabilities

Known vulnerabilities in the mcp-context7 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M CVE-2026-16728	<4.1.3-r0
M CVE-2026-15157	<4.1.3-r0
H CVE-2026-85014	<4.1.3-r0
C CVE-2026-84961	<4.1.3-r0
L CVE-2026-18149	<4.1.3-r0
L CVE-2026-19534	<4.1.3-r0
L CVE-2026-85024	<4.1.3-r0
M CVE-2026-16729	<4.1.3-r0
L CVE-2026-18540	<4.1.3-r0
M CVE-2026-84947	<4.1.3-r0
L Insufficient Verification of Data Authenticity	<4.0.0-r0
H CVE-2026-14643	<4.1.3-r0
C CVE-2026-13697	<4.1.3-r0
H CVE-2026-84933	<4.1.3-r0
M CVE-2026-85008	<4.1.3-r0
L CVE-2026-84890	<4.1.3-r0
L Insufficient Comparison	<4.0.0-r0
L Resource Exhaustion	<4.0.0-r0
L CVE-2026-86472	<4.0.0-r0
L CVE-2026-84292	<4.0.0-r0
L Server-Side Request Forgery (SSRF)	<4.0.0-r0
L Insufficient Comparison	<4.0.0-r0
L CVE-2026-76172	<4.0.0-r0
L CVE-2026-82562	<4.0.0-r0
L CVE-2026-75975	<4.0.0-r0
L Improper Input Validation	<4.0.0-r0
L Improper Input Validation	<4.0.0-r0
L Inefficient Regular Expression Complexity	<4.0.0-r0
L CVE-2026-18446	<4.0.0-r0
L CVE-2026-13676	<4.0.0-r0
L CVE-2026-16221	<4.0.0-r0
L Improper Input Validation	<4.0.0-r0
L CVE-2026-6733	<3.2.5-r0
L CVE-2026-11525	<3.2.5-r0
L CVE-2026-9679	<3.2.5-r0
L CVE-2026-4926	*
L CVE-2026-12151	<3.2.5-r0
L CVE-2026-6322	<4.0.0-r0
L CVE-2026-6321	<4.0.0-r0
L Overly Permissive Cross-domain Whitelist	*