Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2026/10/28 7:51 p.m.•19 views

GHSA-4MFG-R38W-W8FG mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6

URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6 Summary mcp-sanitizer v1.3.3 fails to block Server-Side Request Forgery SSRF targets when a localhost URL includes an explicit port e.g., http://localhost:8080/ or when an IPv6 loopback/link-local address...

8.2CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder