Skip to content
OpenAdvisories

Vendor

leshchenko1979

2 known vulnerabilities.

Products

fast-mcp-telegram 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-55096

    SSRF via DNS-resolution gap in _validate_url_security (file download by URL)

    fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools accept files as a list of http(s) URLs, which the server downloads and attaches to the outgoing Telegram message. Downloads are guarded by _val…

    leshchenko1979 fast-mcp-telegram