Detections
Analytics
SCA: security update for mcp-searxng (GHSA-mrvx-jmjw-vggc)
high Tenable Self-Hosted Container Security Plugin ID 443654
Description
SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`Solution
Update the mcp-searxng library and its related packages to version 1.7.1 or later.See Also
Plugin Details
Severity: High
ID: 443654
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 6/20/2026
Updated: 6/20/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 6/19/2026
Vulnerability Publication Date: 6/19/2026
Reference Information
cwe: CWE-918