CVE-2026-19375

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-19375

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19375.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-19375

Published

2026-08-09T23:15:10Z

Modified

2026-08-14T03:51:33Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery

Details

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_mcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19375.json"
}

References

Affected packages

Git / github.com/dmitriiweb/article-scraper-mcp

Affected ranges

Type

GIT

Repo

https://github.com/dmitriiweb/article-scraper-mcp

Events

Introduced

bcc0c5c3beb550e079f0076ba1ff554cdcbad9b4

Last Affected

bcc0c5c3beb550e079f0076ba1ff554cdcbad9b4

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*

1.0.0

v1.*

v1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19375.json"