CVE Intelligence

Jae-jae vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Jae-jae products: 1 record(s), with severity, exploitation and fixes.

Fetcher-mcp 1

Exploited only (KEV) →

CVE-2026-74858 Medium · 6.3 CWE-918 Aug 17, 2026
jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.