CVE-2026-58485
1 advisory.
npm/mcp-searxng CVE-2026-58485: high 7.1
SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`
Action: Upgrade mcp-searxng to 1.7.1 or later.
npm i mcp-searxng@1.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.1 | - |
Fixed versions
| 1.7.1 |
Sources
- osv: GHSA-mrvx-jmjw-vggc
- https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-mrvx-jmjw-vggc
- https://github.com/ihor-sokoliuk/mcp-searxng
CVE-2026-58485 · published · modified · JSON