Threats affecting pkg:github/dmitriiweb/article-scraper-mcp

CVE-2026-19375 is a server-side request forgery (SSRF) vulnerability in dmitriiweb article-scraper-mcp version 1.0.0. The flaw exists in the fetch_article function of the news_scraper_mcp/server.py file, where manipulation of the url argument allows an attacker to perform SSRF attacks remotely. The vulnerability has a medium severity with a CVSS score of 5.3. Exploit code is publicly available, but no official patch or vendor response has been provided yet.