PT-2026-55211

Name of the Vulnerable Software and Affected Versions auth-fetch-mcp versions prior to 3.0.1 Description A Server-Side Request Forgery SSRF issue exists due to improper validation of IPv4-mapped IPv6 addresses. The isPrivateV6 function in src/security.ts, which is called by assertSafeUrl, fails t...