python-utcp — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in python-utcp, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-101061	utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass CWE-918	4.7	Medium	2026-09-27
CVE-2026-101060	python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects CWE-918	8.2	High	2026-09-27
CVE-2026-101059	utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass CWE-918	7.1	High	2026-09-27
CVE-2026-101057	utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL CWE-319	3.1	Low	2026-09-27
CVE-2026-101058	python-utcp before 1.1.12 SSRF via Remote HTTP Manual CWE-918	6.9	Medium	2026-09-27
CVE-2026-12210	universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery CWE-918	6.3	Medium	2026-06-15
CVE-2026-45369	python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol CWE-78	8.3	High	2026-05-14
CVE-2026-45370	python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection CWE-526	7.7	High	2026-05-14
CVE-2026-44661	python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol CWE-918	4.7	Medium	2026-05-14

All 9 known CVE vulnerabilities affecting python-utcp with full Chinese analysis, references, and POCs where available.