https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 13:59:56 +0000 https://db.gcve.eu/vuln/cve-2026-115413 <p><strong>Affected:</strong> aws-api-mcp-server</p> <p>Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server&#39;s configured AWS credentials via an access token issued to another application by the same identity provider.</p> <p>To remediate this issue, users should upgrade to version 1.6.0 and configure the expected token audience or client ID for the server.</p> <p><strong>Affected:</strong> aws-api-mcp-server</p> <p>Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server&#39;s configured AWS credentials via an access token issued to another application by the same identity provider.</p> <p>To remediate this issue, users should upgrade to version 1.6.0 and configure the expected token audience or client ID for the server.</p> https://db.gcve.eu/vuln/cve-2026-115413