CVE-2026-19984: Server-Side Request Forgery in jkawamoto mcp-florence2
A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. It is recommended to change the configuration settings. The vendor explains: "For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code."
AI Analysis
Technical Summary
This vulnerability in jkawamoto mcp-florence2 up to version 0.3.13 allows an attacker to perform server-side request forgery via the get_images function by manipulating the src argument. SSRF can enable attackers to make unauthorized requests from the server to internal or external resources. The vendor has not released a patch but suggests using an SSRF-safe proxy server to mitigate the risk. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, and limited impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation of this SSRF vulnerability could allow an attacker to make unauthorized HTTP(S) requests from the vulnerable server, potentially accessing internal services or resources not otherwise exposed. The impact is rated medium due to limited confidentiality, integrity, and availability effects. There are no known exploits in the wild at this time.
Mitigation Recommendations
No official patch or fix is currently available for this vulnerability. The vendor recommends mitigating the risk by routing all HTTP(S) requests through an SSRF-safe proxy server. This approach prevents exploitation without requiring changes to the mcp-florence2 source code. Users should implement this mitigation as soon as possible to reduce exposure.
CVE-2026-19984: Server-Side Request Forgery in jkawamoto mcp-florence2
Description
A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. It is recommended to change the configuration settings. The vendor explains: "For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code."
CVSS v4.0
Score 5.3medium
Affected software
jkawamoto
mcp-florence2
pkg:pypi/mcp-florence2cpe:2.3:a:jkawamoto:mcp-florence2:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in jkawamoto mcp-florence2 up to version 0.3.13 allows an attacker to perform server-side request forgery via the get_images function by manipulating the src argument. SSRF can enable attackers to make unauthorized requests from the server to internal or external resources. The vendor has not released a patch but suggests using an SSRF-safe proxy server to mitigate the risk. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, and limited impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation of this SSRF vulnerability could allow an attacker to make unauthorized HTTP(S) requests from the vulnerable server, potentially accessing internal services or resources not otherwise exposed. The impact is rated medium due to limited confidentiality, integrity, and availability effects. There are no known exploits in the wild at this time.
Mitigation Recommendations
No official patch or fix is currently available for this vulnerability. The vendor recommends mitigating the risk by routing all HTTP(S) requests through an SSRF-safe proxy server. This approach prevents exploitation without requiring changes to the mcp-florence2 source code. Users should implement this mitigation as soon as possible to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-16T13:50:15.914Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a82948abf8831d53941b7fd
Added to database: 08/17/2026, 04:56:42 UTC
Last enriched: 08/17/2026, 13:27:27 UTC
Last updated: 10/01/2026, 14:51:04 UTC
Views: 79
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.