CVE-2026-19753

Name of the Vulnerable Software and Affected Versions mcp-rdf-explorer version 1.0.0

Description A server-side request forgery (SSRF) issue exists in the MCP Server component within the explore url() function of the src/mcp-rdf-explorer/server.py file. A remote attacker can trigger this by manipulating the url argument. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

Recommendations As a temporary workaround, restrict the use of the explore url() function in mcp-rdf-explorer version 1.0.0 until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.