CVE-2026-19765

The CVE affects eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5, specifically the fetch_swagger component and its loadSource function in src/utils/swagger-parser.ts. A manipulation allows server-side request forgery (SSRF) and can be exploited remotely. The description note...

CVE-2026-19765 eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery

A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...