Skip to content
OpenAdvisories

Product · apify

actors-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-81093

    Apify Actors MCP Server before 0.9.12 Server-Side Request Forgery via get-html-skeleton

    The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/get_html_skeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with a…

    apify actors-mcp-server