PatchSiren

MissionSquad CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW MissionSquad CVE published 2026-08-06

CVE-2026-19040

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to fix this issue. This vulnerability allows attackers to perform server-side request forgery, potentially leading [truncated]