penpot @penpot/mcp

1 known vulnerability in penpot @penpot/mcp, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-100868 CVSS 5.3 medium Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode…