{"action":"Upgrade mcp-searxng to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"0"}],"component":"mcp-searxng","cve_ids":["CVE-2026-54689"],"ecosystem":"npm","epss":0.0019,"exploited":false,"fixed_versions":["1.2.1"],"ghsa_id":"GHSA-wppf-h75h-6pm6","id":"tcs_01M5KGFKYAVD6KZSXXHEX7VNNM","modified_at":"2026-08-19T19:33:55.304696Z","published_at":"2026-08-19T19:23:16Z","references":["https://osv.dev/vulnerability/GHSA-wppf-h75h-6pm6","https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-wppf-h75h-6pm6","https://github.com/ihor-sokoliuk/mcp-searxng","https://github.com/ihor-sokoliuk/mcp-searxng/releases/tag/v1.2.1"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-wppf-h75h-6pm6","url":"https://osv.dev/vulnerability/GHSA-wppf-h75h-6pm6"}],"summary":"SearXNG MCP Server: Additional hardened-mode SSRF bypasses"}