IA Squad
SearchPT

mcp-searxng

js · mcp-searxngCritical

mcp-searxng web_url_read tool vulnerable to unbounded memory allocation via missing Content-Length

The `web_url_read` MCP tool enforces its 5 MiB response-size limit exclusively by inspecting the `Content-Length` header of a prel

20 Jun 2026 · act now