PT-2026-109674

Name of the Vulnerable Software and Affected Versions zotero-mcp versions 0.10.0 through 0.14.1 Description A server-side request forgery SSRF issue exists where the fetch embedded metadata function fetches URLs without validating the destination. Attackers can use prompt injection to force the...