CyberSecBulletin

Aas-ee vulnerabilities

We track 1 vulnerability in Aas-ee products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Aas-ee vulnerabilities

  • 8.2 High severity

    open-webSearch: Server-Side Request Forgery

    CVE-2026-42260Aas-ee

    Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/urlSafety.ts do not recognize bracketed IPv6 literals and do not resolve DNS, whic