CVE-2026-81848

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-81848

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81848.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-81848

Published

2026-08-27T22:30:13Z

Modified

2026-10-28T02:31:01Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X CVSS Calculator

Summary

cyberchitta scrapling-fetch-mcp _fetcher.py s_fetch_pattern server-side request forgery

Details

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fetch_page/s_fetch_pattern of the file src/scrapling_fetch_mcp/_fetcher.py. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. Upgrading to version 0.2.3 is sufficient to resolve this issue. This patch is called 9f6f34e92c55c3d95566ad9c62aca7327d24533a. Upgrading the affected component is advised.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-918"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81848.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "0.2.0"
                        },
                        {
                            "last_affected":  "0.2.0"
                        },
                        {
                            "introduced":  "0.2.1"
                        },
                        {
                            "last_affected":  "0.2.1"
                        },
                        {
                            "introduced":  "0.2.2"
                        },
                        {
                            "last_affected":  "0.2.2"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandaloneSingleVersion"
                }
            ]
        },
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "0.2.2"
                        }
                    ],
                    "source":  "DESCRIPTION"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/cyberchitta/scrapling-fetch-mcp

Affected ranges

Type

GIT

Repo

https://github.com/cyberchitta/scrapling-fetch-mcp

Events

Introduced

Fixed

9f6f34e92c55c3d95566ad9c62aca7327d24533a

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "fixed":  "9f6f34e92c55c3d95566ad9c62aca7327d24533a"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81848.json"