Skip to content
OpenAdvisories

Package · npm

mcp-searxng

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-58483

    mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

    mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read in src/index.ts passes a caller-supplied URL to readUrlContent() in src/url-reader.ts, where checkCon…

    ihor-sokoliuk mcp-searxng mcp-searxng npm
  • High 7.1
    CVE-2026-58485

    mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`

    mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read receives its caller-controlled URL through src/index.ts and validates only the literal hostname in as…

    ihor-sokoliuk mcp-searxng mcp-searxng npm