CVE-2026-19751

MEDIUM 6.3

EnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgery

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected element is the function axios.get of the file src/index.ts of the component parse-csv tool. This manipulation of the argument csvUrl causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-918
Vendor	enzovezzaro
Product	mcp-dominican-layer
Published	Aug 13, 2026

Stay Ahead of the Next One

Get instant alerts for enzovezzaro mcp-dominican-layer

Be the first to know when new medium vulnerabilities affecting enzovezzaro mcp-dominican-layer are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

EnzoVezzaro / mcp-dominican-layer

39dd373786712650097ad31db27d5c477c8f9c82

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/389528 vuldb.com: https://vuldb.com/vuln/389528/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19751 vuldb.com: https://vuldb.com/submit/868925 github.com: https://github.com/EnzoVezzaro/mcp-dominican-layer/issues/2 github.com: https://github.com/EnzoVezzaro/mcp-dominican-layer/

Credits

🔍 skywings (VulDB User) VulDB CNA Team