{"id":"ghsa-ghsa-4mfg-r38w-w8fg","seq":2056991,"kind":"advisory","title":"mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6","url":"https://github.com/advisories/GHSA-4mfg-r38w-w8fg","permalink":"https://vulnpulse.app/items/ghsa-ghsa-4mfg-r38w-w8fg","summary":"影響: npm:mcp-sanitizer < 1.4.0 → 1.4.0\nURL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6 Summary mcp-sanitizer v1.3.3 fails to block Server-Side Request Forgery (SSRF) targets when a localhost URL includes an explicit port (e.g., http://localhost:8080/) or when an IPv6 loopback/link-local address is expressed in bracketed notation (e.g., http://[::1]:8080/, http://[fe80::1]:8080/). Because the library is explicitly designed to gate MCP tool parameters such as web_fetch and web_scraper befor…","severity":"high","techs":["nodejs"],"cves":[],"tags":["GHSA-4mfg-r38w-w8fg","mcp-sanitizer"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-28T19:51:39.000Z","fetched_at":"2026-10-29T00:48:52.653Z"}