← All credits

Andrea Cosentino (ancosen@gmail.com)

1 vulnerability record and advisories credit this contributor.

CVE-2026-41041
Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.