Threats tagged 'ghsa-xhx7-9vjr-p2h8'

Chainlit version 2.12.0 has a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowed_urls restrictions. This occurs because the validate_mcp_url function does not reject semicolon characters, enabling attackers to craft MCP URLs with '..;' path segments. These specially crafted requests to the /mcp endpoint can access paths outside the intended operator's grant on origins that strip semicolon path parameters.