Vulnerabilidades de Jae-jae
CVEs publicadas que afetam produtos de Jae-jae: 1 registro(s), com severidade, exploração e correções.
CVE-2026-74858
Média · 6.3
CWE-918 17/08/2026
jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.