Approved changes feed: RSS · Atom

cpe:2.3:a:lharries:whatsapp-mcp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLharries (37e6a41d-d95e-53b2-89fb-351da4b420ec)
ProductWhatsapp Mcp (d56480c1-890d-5caf-bc0a-e36e2cf64d75)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-10264 vulnerable 2026-06-08 07:47:13.729008 lharries whatsapp-mcp Send API Endpoint main.go SendMessageRequest path traversal
LOW (3.5)
A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessageRequest of the file whatsapp-bridge/main.go of the component Send API Endpoint. This manipulation of the argument mediaPath causes path traversal. The exploit has been publicly disclosed and may be utilized. Patch name: 6657cdceadd361e8fbe824afe9d00b4504009a5d. It is recommended to apply a patch to fix this issue.
Published: 2026-06-01T14:15:10.961Z
Updated: 2026-06-03T14:46:27.835Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.