Skip to content
OpenAdvisories

Vendor

dmitryglhf

1 known vulnerabilities.

Products

mcp-url-downloader 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-7158

    dmitryglhf mcp-url-downloader server.py _validate_url_safe server-side request forgery

    A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6. Affected by this issue is the function _validate_url_safe of the file src/mcp_url_downloader/server.py. Such manipulation of the argument url leads…

    dmitryglhf mcp-url-downloader mcp-url-downloader PyPI