HIGH8.2npm
GHSA-hv85-774v-26fgauth-fetch-mcp: SSRF and disk exfiltration via unvalidated auth_fetch and download_media URLs
Modified: 5/19/2026
package
npm/auth-fetch-mcp
pkg:npm/auth-fetch-mcp
HIGH7.4npm
GHSA-pvrj-8cg3-j5f8· CVE-2026-49857auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback
Modified: 7/1/2026