CVE-2026-58201 | merill Lokka up to 2.1.1 URL Authority Parsing src/mcp/src/main.ts path missing initialization

September 15, 2026 Yanac

A vulnerability classified as problematic has been found in merill Lokka up to 2.1.1. This issue affects some unknown processing of the file src/mcp/src/main.ts of the component URL Authority Parsing. The manipulation of the argument path leads to missing initialization of a variable.

This vulnerability is referenced as CVE-2026-58201. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More