Hyper-mcp-rs
Hyper-mcp-rs Security Releases - October 2026
hyper-mcp-rs-2026-10 Oct 1, 2026 Source: Vendor
Hyper-mcp-rs security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-108698
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-108698
BR2026-0000-029056
hyper-mcp
unclaimed
hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded...
Credited as hieuPenguinnn
CVE-2026-108699
BR2026-0000-029968
hyper-mcp
unclaimed
hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign_verify_args() accepts any signer identit...
Credited as hieuPenguinnn