CVE-2026-19375

Name of the Vulnerable Software and Affected Versions dmitriiweb article-scraper-mcp version 1.0.0

Description A remote attacker can perform server-side request forgery (SSRF), a technique that allows a server to be coerced into making requests to an unintended location, by manipulating the url argument within the fetch article() function located in the news scraper mcp/server.py file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the fetch article() function to minimize the risk of exploitation.