CVE-2026-19337

Name of the Vulnerable Software and Affected Versions adenot mcp-google-search versions prior to 0.3.2

Description A server-side request forgery (SSRF) issue exists within the read webpage component in the src/index.ts file. This occurs when the url argument is manipulated, allowing for local execution attacks. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

Recommendations Apply patch f071d491b685011ca04e8ab8d586fc65f86bcee1 to resolve the issue. As a temporary mitigation, restrict the use of the url argument within the read webpage component.