Executive brief
ha-mcp has XSS via Unescaped HTML in OAuth Consent Form
Affected products
- PyPI ha-mcp
Junglewise Threat Intelligence
CVE-2026-32112 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: ha-mcp (PyPI). Vendors: PyPI.
ha-mcp has XSS via Unescaped HTML in OAuth Consent Form