mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind
Critical severity
GitHub Reviewed
Published
May 25, 2026
in
startreedata/mcp-pinot
•
Updated Jun 26, 2026
Give feedback on Dependabot alerts