Skip to content
OpenAdvisories

Vendor

54yyyu

3 known vulnerabilities.

Products

code-mcp 2 zotero-mcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-108583

    zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool

    zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injec…

    54yyyu zotero-mcp