Kazuph vulnerabilities
We track 1 vulnerability in Kazuph products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Kazuph vulnerabilities
- 7.5 High severity
mcp-fetch: Server-Side Request Forgery
mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a literal such as http://[::1]/ yields the bracketed string, and then tests it with