mcp-server-fetch vulnerabilities

CVEs whose affected-version data names the mcp-server-fetch package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104120High· 7.3

today

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_server_fetch/server.py of the component Fetch Tool. The mani…

▾ Twilightmodelcontextprotocol · mcp-server-fetchvia NVD