Security: universal-tool-calling-protocol/python-utcp
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command InjectionGHSA-5v57-8rxj-3p2r published
May 10, 2026 by h3xxitHigh -
Command Injection via Unsanitized Argument Substitution in CLI Communication ProtocolGHSA-33p6-5jxp-p3x4 published
May 10, 2026 by h3xxitCritical -
SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocolGHSA-39j6-4867-gg4w published
May 3, 2026 by h3xxitModerate
Learn more about advisories related to universal-tool-calling-protocol/python-utcp in the GitHub Advisory Database