Vulnerabilities

TI-2026-42087 CVE-2026-58483

mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

HIGH 72

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0067 Published 2026-09-15 Fixed in 1.7.1 CWE-400

TI-2026-42089 CVE-2026-58485

MEDIUM 64

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00188 Published 2026-09-15 Fixed in 1.7.1 CWE-918

TI-2026-39509 CVE-2026-54688 · GHSA-q87f-qc2r-2gw4

MEDIUM 62

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00499 Published 2026-09-15 Fixed in 1.2.0, 1.2.1 CWE-918

TI-2026-39510 CVE-2026-54689 · GHSA-wppf-h75h-6pm6

MEDIUM 61

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.0019 Published 2026-09-15 Fixed in 1.2.0, 1.2.1 CWE-200