What’s Vulnerable › Products

Aas-ee open-webSearch vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Aas-ee open-webSearch version is affected

Latest Aas-ee open-webSearch vulnerabilities

• CVE-2026-42260 — Open-WebSearch: SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname` (CVSS 8.2)