CVE-2026-19337 PUBLISHED

adenot mcp-google-search read_webpage index.ts server-side request forgery

Assigner: VulDB
Reserved: 08.08.2026 Published: 09.08.2026 Updated: 09.08.2026

A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component read_webpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This patch is called f071d491b685011ca04e8ab8d586fc65f86bcee1. It is advisable to implement a patch to correct this issue.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 4.8

Product Status

Vendor adenot
Product mcp-google-search
Versions
  • Version 0.3.0 is affected
  • Version 0.3.1 is affected

Credits

  • gongyanyu04 (VulDB User) reporter

References

Problem Types

  • Server-Side Request Forgery CWE