CVE-2026-19375
dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_mcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-918 |
| Vendor | dmitriiweb |
| Product | article-scraper-mcp |
| Published | Aug 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for dmitriiweb article-scraper-mcp
Be the first to know when new medium vulnerabilities affecting dmitriiweb article-scraper-mcp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
dmitriiweb / article-scraper-mcp
1.0.0
References
vuldb.com: https://vuldb.com/vuln/387259 vuldb.com: https://vuldb.com/vuln/387259/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19375 vuldb.com: https://vuldb.com/submit/866273 github.com: https://github.com/dmitriiweb/article-scraper-mcp/issues/3 github.com: https://github.com/dmitriiweb/article-scraper-mcp/
Credits
🔍 skywings (VulDB User) VulDB CNA Team