Filtered by vendor Jae-jae Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-74858 1 Jae-jae 1 Fetcher-mcp 2026-08-17 6.3 Medium
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.