sonatype-2026-005085

@frontmcp/adapters - Server-Side Request Forgery (SSRF)

Published Jul 25, 2026

Advisory · GHSA-8q49-2h5h-434x

Security Details

Components Impacted

Sonatype Research

sonatype-2026-005085 Security Details

• CVE ID: sonatype-2026-005085
• CWE: N/A
• CVE Description: @frontmcp/adapters - Server-Side Request Forgery (SSRF)
• Published: Jul 25, 2026
• CVSS Score & Severity: 5.9 Medium
• CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
• EPSS Score: 0%
• Malware: malware
• KEV Status: Not in KEV Catalog: No known exploits
• Affected Ecosystems: affected
• Source: Sonatype

References

GitHub · Advisory · GHSA-8q49-2h5h-434x THIRD_PARTY