CVE-2026-19369

creationtimestamp| type| source ---|---|--- 2026-08-09 22:42:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dzrqtrm37fwwb...

CVE-2026-19369

The CVE concerns KS-GEN-AI jira-mcp-server 0.2.0. It affects the add_attachment_from_public_url path in src/index.ts, specifically the function axios.get. Maliciously manipulating the imageUrl parameter enables server-side request forgery (SSRF) and requires a local attack. Exploit maturity is sh...