# Agent MCP-server dependencies pinned to versions with published CVEs.
# The vulnerability lives in the dependency tree, not in any MCP/cloud config.
open-webui==0.8.11        # CVE-2026-45672: code-exec gate bypass (fixed 0.8.12)
excel-mcp-server==0.1.7   # CVE-2026-40576: unauth path traversal (fixed 0.1.8)
aws-mcp==1.7.0            # CVE-2026-5059: unauth command-injection RCE (no fix)
requests==2.32.0          # negative control: not in the known-CVE table
