Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server

GHSA-c4hg-6933-x62x · CVE-2026-34476 · GO-2026-5310 · 갱신 2026. 7. 21.

해야 할 일

github.com/apache/skywalking-mcp: 0.2.0 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
Go	github.com/apache/skywalking-mcp	0.2.0

Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP.

This issue affects Apache SkyWalking MCP: 0.1.0.

Users are recommended to upgrade to version 0.2.0, which fixes this issue.

Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server (GHSA-c4hg-6933-x62x) · Sieve