auth-fetch-mcp vulnerabilities

CVEs whose affected-version data names the auth-fetch-mcp package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49857High· 7.4

1mo ago

auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages

auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implements SSRF protection in `assertSafeUrl()` (`src/security.ts`) to block requests to private and loopback addresses. Ho…

▾ Twilightauth-fetch-mcp · auth-fetch-mcpEPSS 0.49%via NVD