{"data":{"id":"089976f6-1d3e-4508-b308-67789df5c076","title":"GHSA-mrvx-jmjw-vggc:  SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`","summary":"The `web_url_read` tool in `mcp-searxng` is vulnerable to SSRF via DNS rebinding. The `assertUrlAllowed()` function in `src/url-reader.ts` checks only the hostname string against a private address blocklist and performs no DNS resolution, so a domain that resolves to a private or loopback IP bypasses the check. In default HTTP mode, where `requireAuth` is `false`, an attacker can read arbitrary internal HTTP services reachable from the server host without authentication.","solution":"The source recommends resolving the hostname with `node:dns/promises` inside `assertUrlAllowed()` before the fetch is issued, rejecting non-http(s) protocols, and checking the resolved addresses against the private IPv4 and IPv6 checks, with `assertUrlAllowed()` made async and awaited at both call sites.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-mrvx-jmjw-vggc","publishedAt":"2026-06-19T21:42:46.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mcp-searxng@< 1.7.1 (fixed: 1.7.1)"],"affectedPackageNames":["mcp-searxng"],"affectedPackageRefs":["npm:mcp-searxng"],"affectedVendors":[],"affectedVendorsRaw":["SearXNG MCP Server","mcp-searxng"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-mrvx-jmjw-vggc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-19T21:42:46.000Z","fixReleasedAt":"2026-06-18T21:36:46.879Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:34:01.684Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"mcp-searxng","fixedVersion":"1.7.1","matchedVersion":"1.7.1","fixReleasedAt":"2026-06-18T21:36:46.879Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:01.534Z"}]}}