CVE-2026-45609
1 advisory.
Maven/org.springaicommunity:mcp-client-security CVE-2026-45609: high 7.2
Spring AI MCP Security: Unvalidated URL Fetching (SSRF)
Action: Upgrade org.springaicommunity:mcp-client-security to 0.1.9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.9 | - |
Fixed versions
| 0.1.9 |
Sources
- osv: GHSA-qjp4-4jvr-xqg3
- https://github.com/spring-ai-community/mcp-security/security/advisories/GHSA-qjp4-4jvr-xqg3
- https://nvd.nist.gov/vuln/detail/CVE-2026-45609
- https://github.com/spring-ai-community/mcp-security/pull/68
- https://github.com/spring-ai-community/mcp-security/commit/e6b67d8a67cd7acbee6e4c0741c385d62e3ed576
- https://github.com/spring-ai-community/mcp-security
- https://github.com/spring-ai-community/mcp-security/releases/tag/v0.1.9
CVE-2026-45609 · published · modified · JSON