{"id":"CVE-2026-81848","summary":"cyberchitta scrapling-fetch-mcp _fetcher.py s_fetch_pattern server-side request forgery","details":"A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fetch_page/s_fetch_pattern of the file src/scrapling_fetch_mcp/_fetcher.py. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. Upgrading to version 0.2.3 is sufficient to resolve this issue. This patch is called 9f6f34e92c55c3d95566ad9c62aca7327d24533a. Upgrading the affected component is advised.","modified":"2026-10-28T02:31:01.867839896Z","published":"2026-08-27T22:30:13.710Z","database_specific":{"cwe_ids":["CWE-918"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81848.json","unresolved_ranges":[{"extracted_events":[{"range":[{"introduced":"0.2.0"},{"last_affected":"0.2.0"},{"introduced":"0.2.1"},{"last_affected":"0.2.1"},{"introduced":"0.2.2"},{"last_affected":"0.2.2"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"}]},{"extracted_events":[{"source":"DESCRIPTION","range":[{"last_affected":"0.2.2"}]}]}],"cna_assigner":"VulDB"},"references":[{"type":"WEB","url":"https://github.com/cyberchitta/scrapling-fetch-mcp/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81848.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81848"},{"type":"ADVISORY","url":"https://vuldb.com/cve/CVE-2026-81848"},{"type":"ADVISORY","url":"https://vuldb.com/submit/887256"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/396173"},{"type":"REPORT","url":"https://github.com/cyberchitta/scrapling-fetch-mcp/issues/6"},{"type":"REPORT","url":"https://vuldb.com/vuln/396173/cti"},{"type":"FIX","url":"https://github.com/cyberchitta/scrapling-fetch-mcp/commit/9f6f34e92c55c3d95566ad9c62aca7327d24533a"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cyberchitta/scrapling-fetch-mcp","events":[{"introduced":"0"},{"fixed":"9f6f34e92c55c3d95566ad9c62aca7327d24533a"}],"database_specific":{"extracted_events":[{"range":[{"fixed":"9f6f34e92c55c3d95566ad9c62aca7327d24533a"}],"source":"REFERENCES_COMMIT"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81848.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X"}]}