Detections
Analytics
SCA: security update for @kozou/api, @kozou/core, @kozou/mcp, kozou (GHSA-v52w-28xh-v562)
high Tenable Self-Hosted Container Security Plugin ID 443625
Description
Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure)Solution
Update the @kozou/api library and its related packages to version 1.8.1 or later.See Also
Plugin Details
Severity: High
ID: 443625
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 6/20/2026
Updated: 6/20/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 6/19/2026
Vulnerability Publication Date: 6/19/2026