{"action":"Upgrade meta-ads-mcp to 1.0.115 or later.","affected":[{"fixed":"1.0.115","introduced":"0"}],"component":"meta-ads-mcp","cve_ids":["CVE-2026-54549"],"ecosystem":"PyPI","epss":0.00399,"exploited":false,"fixed_versions":["1.0.115"],"ghsa_id":"GHSA-45gf-fjxp-cjpq","id":"tcs_01M5KEX91W3WXAHQ8GZD0NVN8F","modified_at":"2026-07-23T15:11:42.744080055Z","published_at":"2026-07-17T18:47:31Z","references":["https://osv.dev/vulnerability/GHSA-45gf-fjxp-cjpq","https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-45gf-fjxp-cjpq","https://github.com/pipeboard-co/meta-ads-mcp/commit/7d9926336bbdac6285a988d043c4ccfe126c94c5","https://github.com/pipeboard-co/meta-ads-mcp","https://github.com/pipeboard-co/meta-ads-mcp/releases/tag/1.0.115"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-45gf-fjxp-cjpq","url":"https://osv.dev/vulnerability/GHSA-45gf-fjxp-cjpq"}],"summary":"meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch"}