Threats affecting pkg:npm/adenot/mcp-google-search

CVE-2026-19337 is a server-side request forgery (SSRF) vulnerability in the adenot mcp-google-search component up to version 0.3.1. It affects an unknown function in the src/index.ts file within the read_webpage component. The vulnerability arises from manipulation of the url argument, allowing SSRF attacks. Exploitation is limited to local execution. The issue has been addressed in a patch identified by commit f071d491b685011ca04e8ab8d586fc65f86bcee1. Users are advised to apply this patch to remediate the vulnerability.