CVE-2026-19765 | CVSS: 6.3 | 严重级别: MEDIUM
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetch_swagger. Performing a manipulation results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was
参考链接:
• https://github.com/eyaushev/swagger-testcase-mcp/
• https://github.com/eyaushev/swagger-testcase-mcp/issues/1
• https://vuldb.com/cve/CVE-2026-19765
📌 数据来源: NVD 官方