Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetch_swagger. Performing a manipulation results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-19765 A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of t… https://www.cve.org/CVERecord?id=CVE-2026-19765
Post summary
CVE-2026-19765 is disclosed as a flaw in the loadSource function of eyaushev swagger-testcase-mcp, with no PoC, exploitation, or mitigation details provided.
🚨*CVE* CVE-2026-19765 A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of t… https://www.cve.org/CVERecord?id=CVE-2026-19765 ----- Traducción: CVE-2026-19765 Se … https://infoflow.cloud`
Post summary
The tweet announces the discovery of CVE-2026-19765, noting that it impacts the `loadSource` function in the eyaushev swagger-testcase-mcp repository, with no PoC, exploit, or patch details provided.
CVE-2026-19765 Server-Side Request Forgery in eyaushev swagger-testcase-mcp via fetch_swagger Component https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19765
Post summary
The entry announces a new Server‑Side Request Forgery vulnerability (CVE‑2026‑19765) affecting the eyaushev swagger-testcase-mcp component via fetch_swagger; no exploit code, patch, or active exploitation details are included.