TI-2026-46464 CVE-2026-65056 · GHSA-r9hf-v7rm-5h4j
mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering
Priority HIGH 69
mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visit_page tool,…