Server-side Request Forgery (SSRF)

Overview @merill/lokka is a Lokka is a Model Context Protocol MCP server for Microsoft Graph. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of user-supplied input in the process constructing Azure Resource Manager request URLs. An...