GHSA-2xhg-73j7-rrgx: Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

# Analysis ## Summary The Contentful MCP Server tools `export_space` and `import_space` accept LLM-controlled parameters like `host` and `proxy` that are passed directly to the API client without filtering, allowing an attacker to redirect the server's API credentials (a Personal Access Token, or PAT) to their own server. An attacker can exploit this by directly calling these tools with a malicious `host` parameter, or by embedding instructions in Contentful content that trick the LLM into mak