U
Vendor security profile
universal-tool-calling-protocol
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit3
Patch rate%0
Avg. CVSS5.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
5
0
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Low2 (40%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%60
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
2.3
CVE-2026-101061
utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass
U
Patch status unknownEPSS %0
8.4
CVE-2026-101060
python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects
U
Patch status unknownEPSS %0
7.1
CVE-2026-101059
utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass
U
Patch status unknownEPSS %0
7.1
CVE-2026-101058
python-utcp before 1.1.12 SSRF via Remote HTTP Manual
U
Patch status unknownEPSS %0
2.3
CVE-2026-101057
utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL
U
Patch status unknownEPSS %0