AttackFeed by Joe Wagner | SSRF in Anthropic mcp-server-fetch and Microsoft playwright-mcp — publicly disclosed via GitHub issues  - Full Disclosure

SSRF in Anthropic mcp-server-fetch and Microsoft playwright-mcp — publicly disclosed via GitHub issues  – Full Disclosure

Posted on By Joe-W No Comments on SSRF in Anthropic mcp-server-fetch and Microsoft playwright-mcp — publicly disclosed via GitHub issues  – Full Disclosure
Alert Feeds

 

Posted by outreach on May 25

—–BEGIN SECURITY ADVISORY—–

Title: Server-Side Request Forgery (SSRF) in Anthropic mcp-server-fetch and Microsoft playwright-mcp
Author: Syed Anas Mohiuddin <anasmohiuddinsyed () gmail com>
Date: May 25, 2026
CVSS: 7.5 (HIGH) — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
References: Already public via GitHub issues (see below)

== AFFECTED PRODUCTS ==

1. Anthropic mcp-server-fetch (modelcontextprotocol/servers)
All versions as of May…
 – Read More  – Full Disclosure 

You may also like

AttackFeed by Joe Wagner | Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App  - Full Disclosure
Alert Feeds
Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App  – Full Disclosure
April 29, 2026
AttackFeed by Joe Wagner | APPLE-SA-02-11-2026-7 watchOS 26.3  - Full Disclosure
Alert Feeds
APPLE-SA-02-11-2026-7 watchOS 26.3  – Full Disclosure
February 16, 2026
AttackFeed by Joe Wagner | SEC Consult SA-20260218-0 :: Multiple Critical Vulnerabilities in NesterSoft WorkTime (on-prem/cloud)  - Full Disclosure
Alert Feeds
SEC Consult SA-20260218-0 :: Multiple Critical Vulnerabilities in NesterSoft WorkTime (on-prem/cloud)  – Full Disclosure
February 22, 2026
AttackFeed by Joe Wagner | Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect  - Full Disclosure
Alert Feeds
Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect  – Full Disclosure
May 25, 2026

Leave a Reply

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.