A vulnerability was found in the houtini-ai voice-analyser-mcp package up to version 2.1.1. The affected component is the collect_corpus feature, specifically the fetch function in the src/utils/crawler.ts file. This vulnerability allows for server-side request forgery (SSRF) when the sitemap_url argument is manipulated. The exploit has been made public, and remote exploitation is possible. However, the v [truncated]
A vulnerability was found in the houtini-ai seo-crawler-mcp package up to version 2.1.5. The issue is located in the `run_seo_audit` function of the `src/core/CrawlOrchestrator.ts` file, which is part of the Crawler component. This vulnerability allows for server-side request forgery (SSRF) and can be exploited remotely. The exploit has been publicly disclosed, and although the vendor was notified, they d [truncated]
