Detections
Analytics

SCA: security update for mcp-sanitizer (GHSA-4mfg-r38w-w8fg)

high Tenable Cloud Security Plugin ID 477840

Description

mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6

Solution

Update the mcp-sanitizer library and its related packages to version 1.4.0 or later.

See Also

https://github.com/advisories/GHSA-4mfg-r38w-w8fg

Plugin Details

Severity: High

ID: 477840

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/29/2026

Updated: 10/29/2026

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/28/2026

Vulnerability Publication Date: 10/28/2026

Reference Information

cwe: CWE-918