MCPA-2026-0094
mediumssrfCVSS 6.3
article-scraper-mcp fetch_article server-side request forgery (CVE-2026-19375)
article-scraper-mcp (PyPI) 1.0.0 is vulnerable to SSRF: news_scraper_mcp/server.py (component fetch_article) validates the url argument only against the pattern ^https?://.+ before passing it to requests.get(), with no allowlist or network-range validation, so a poisoned tool call can make the server request loopback, private-network, or cloud-metadata URLs from its network position and read the responses (verified by unpacking the published article-scraper-mcp-1.0.0 wheel). The maintainer was notified via a public issue but no fixed release exists as of 2026-08-10, so this is recorded as last_affected 1.0.0.
Affected packages
| Ecosystem | Package | Affected versions |
|---|---|---|
| pypi | article-scraper-mcp | >= 0, <= 1.0.0 |
Identifiers
CVE-2026-19375GHSA-wmf6-8cmx-6fp6CWE-918
References
- advisory https://github.com/advisories/GHSA-wmf6-8cmx-6fp6
- web https://nvd.nist.gov/vuln/detail/CVE-2026-19375
- web https://github.com/dmitriiweb/article-scraper-mcp/issues/3
- web https://github.com/dmitriiweb/article-scraper-mcp
Timeline
- Published: 2026-08-10