python-utcp

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication ProtocolCVE-2026-45369universal-tool-calling-protocol · CVSS 8.3 · 0.3% likely

   CWE-78

2. utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypassCVE-2026-101061universal-tool-calling-protocol · CVSS 4.7 · 0.2% likely

   CWE-918

3. universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgeryCVE-2026-12210universal-tool-calling-protocol · CVSS 6.3 · 0.2% likely

   CWE-918

4. python-utcp before 1.1.4 SSRF via unvalidated HTTP redirectsCVE-2026-101060universal-tool-calling-protocol · CVSS 8.2 · 0.2% likely

   CWE-918

5. utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary BypassCVE-2026-101059universal-tool-calling-protocol · CVSS 7.1 · 0.2% likely

   CWE-918

6. python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command InjectionCVE-2026-45370universal-tool-calling-protocol · CVSS 7.7 · 0.2% likely

   CWE-526

7. python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocolCVE-2026-44661universal-tool-calling-protocol · CVSS 4.7 · 0.2% likely

   CWE-918

8. python-utcp before 1.1.12 SSRF via Remote HTTP ManualCVE-2026-101058universal-tool-calling-protocol · CVSS 6.9 · 0.2% likely

   CWE-918

9. utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URLCVE-2026-101057universal-tool-calling-protocol · CVSS 3.1 · 0.1% likely

   CWE-319

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.