open-websearch vulnerabilities (npm)

1 vulnerability.

• open-websearch npm Open-WebSearch: SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname` CVE-2026-42260 Fix available 8.2 HighMay 5, 2026