What’s Vulnerable › Vulnerabilities

CVE-2026-19984: jkawamoto mcp-florence2 __init__.py get_images server-side request forgery

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-17 · updated 2026-08-20
• Weakness: CWE-918

Description

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. It is recommended to change the configuration settings. The vendor explains: "For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code."

Affected products

• jkawamoto mcp-florence2: 0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5 (+8)

References

• https://github.com/jkawamoto/mcp-florence2/
• https://github.com/jkawamoto/mcp-florence2/issues/59
• https://vuldb.com/cve/CVE-2026-19984
• https://vuldb.com/submit/873920
• https://vuldb.com/vuln/391184
• https://vuldb.com/vuln/391184/cti

Get alerted when CVE-2026-19984 or the next vulnerability affects your stack