reddit | Technical Information Security Content & Discussion 中文 关注 CircleCI 的 MCP 服务器存在未认证远程代码执行漏洞:任何非浏览器客户端均可绕过主机/来源白名单(GHSA-xv5j-cwgj-22r4) Unauthenticated RCE in CircleCI's MCP server: Host/Origin allowlist bypassed by any non-browser client (GHSA-xv5j-cwgj-22r4) reddit.com reddit | Technical Information Security Content & Discussion 中文 RSS thenote.app