{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.1"}],"component":"api-lab-mcp","cve_ids":["CVE-2026-5832"],"ecosystem":"npm","epss":0.00288,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-crh9-3gjh-m6gc","id":"tcs_01M5KFKJWMSW4EXQ43G43XN4SH","modified_at":"2026-04-10T19:41:27.751713Z","published_at":"2026-04-09T03:31:15Z","references":["https://osv.dev/vulnerability/GHSA-crh9-3gjh-m6gc","https://nvd.nist.gov/vuln/detail/CVE-2026-5832","https://github.com/BruceJqs/public_exp/issues/6","https://github.com/atototo/api-lab-mcp/issues/4","https://github.com/atototo/api-lab-mcp","https://vuldb.com/submit/789765","https://vuldb.com/vuln/356288","https://vuldb.com/vuln/356288/cti"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-crh9-3gjh-m6gc","url":"https://osv.dev/vulnerability/GHSA-crh9-3gjh-m6gc"}],"summary":"api-lab-mcp vulnerable to SSRF"}