What’s Vulnerable › Products

universal-tool-calling-protocol python-utcp vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your universal-tool-calling-protocol python-utcp version is affected

Latest universal-tool-calling-protocol python-utcp vulnerabilities

• CVE-2026-101061 — utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass (CVSS 4.7)
• CVE-2026-101060 — python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects (CVSS 8.2)
• CVE-2026-101059 — utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass (CVSS 7.1)
• CVE-2026-101058 — python-utcp before 1.1.12 SSRF via Remote HTTP Manual (CVSS 6.9)
• CVE-2026-101057 — utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL (CVSS 3.1)
• CVE-2026-12210 — universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery (CVSS 6.3)
• CVE-2026-45370 — python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection (CVSS 7.7)
• CVE-2026-45369 — python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol (CVSS 8.3)
• CVE-2026-44661 — python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol (CVSS 4.7)