PE
Product
@penpot/mcp
by penpot · last CVE Sep 27, 2026
1
CVEs
0
On KEV
6.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add @penpot/mcp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-100868
6.3
1%
Sep 27
Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
Affected: through 2.15.4
Showing 1