Threats affecting pkg:github/feed-mob/fm-mcp-servers

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.1%	CVE-2026-19770feedmob fm-mcp-servers · Server-Side Request Forgery Medium4.8EPSS 0.1%2026-08-14CVE Database V5CVE-2026-19770 CVE-2026-19770 is a server-side request forgery (SSRF) vulnerability in feedmob fm-mcp-servers version 0.0.3. The flaw exists in the downloadReport function of the Download Endpoint component, where manipulation of the downloadUrl argument allows SSRF attacks. Exploitation requires local access to the environment. The vulnerability has a medium severity score of 4.8 and public exploit code is available. The vendor has not yet responded or issued a patch. EPSS 0.1%Vulnerability	CVE Database V5	2026-08-14

Page 1 of 1 · 1 duplicate CVE record merged