Lyrie
← AI Threats
1 sources verified·1 min read
By Lyrie Threat Intelligence·6/26/2026

@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url

_AI Threats — being enriched by Lyrie Threat Intelligence._

Lyrie Verdict

Lyrie's autonomous defense layer flags this class of exposure the moment it surfaces — no signature update required.

Validated sources

  1. [1]GitHub Advisory