Aas-ee Open-websearch vulnerabilities

• aas-ee open-websearch Open-WebSearch: SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname` CVE-2026-42260 Fix available 8.2 HighMay 5, 2026