Skip to content
OpenAdvisories

Package · npm

mcp-fetch-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2025-65513

    Fetch MCP Server has a Server-Side Request Forgery (SSRF) vulnerability

    fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery (SSRF) vulnerability, which allows attackers to bypass private IP validation and access internal network resources.

    mcp-fetch-server npm