Aas-ee
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| open-webSearch | 1 | – | May 12, 2026 |
Exploited and recent CVEs
- CVE-2026-42260 Open-WebSearch: SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname` 0.3%