Vibe Coding
mcp-searxng draws four CVEs in one day for the same URL guard failing four different ways
Published 2026-09-15: CVE-2026-54688 (6.5) shows `assertUrlAllowed()` only runs when `MCP_HTTP_HARDEN` is enabled, and it is off by default. CVE-2026-54689 (6.3) bypasses the policy even when hardening is on, because redirect targets are not revalidated, `0.0.0.0` is not classified as internal, and IPv4-mapped IPv6 in hex form is not recognized. CVE-2026-58485 (7.1) validates the literal hostname before `undiciFetch()` performs OS DNS resolution, so a public-looking name resolving to loopback passes. CVE-2026-58483 (7.5) treats a missing Content-Length as inconclusive and then reads the whole body, allowing unbounded memory use. Fixes are in 1.2.0 and 1.7.1.
Source
↳ Follow the thread