mcp-searxng
js · mcp-searxngCritical
mcp-searxng web_url_read tool vulnerable to unbounded memory allocation via missing Content-Length
The `web_url_read` MCP tool enforces its 5 MiB response-size limit exclusively by inspecting the `Content-Length` header of a prel
20 Jun 2026 · act now