mcp-searxng vulnerabilities

2 known vulnerabilities in mcp-searxng from Ihor-sokoliuk. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  mcp-searxng: Server-Side Request Forgery

  CVE-2026-58485Sep 15, 2026Ihor-sokoliuk

  mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read receives its caller-controlled URL through src/index.ts and validates only the literal hostname in ass

• 7.5 High severity

  mcp-searxng: Uncontrolled Resource Consumption

  CVE-2026-58483Sep 15, 2026Ihor-sokoliuk

  mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read in src/index.ts passes a caller-supplied URL to readUrlContent() in src/url-reader.ts, where checkCont