CVE-2026-34476

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.

CVE-2026-34884

Apache SkyWalking MCP version 0.1.0 is vulnerable to Server-Side Request Forgery (SSRF) and GraphQL expression injection . The SSRF vulnerability specifically occurs through the set skywalking url tool within the MCP Server. To remediate these issues, users are recommended to upgrade to version 0...