Security: SSRF via MCP Tool Provider server_url (authenticated users can reach internal services)

May 10, 2026 · #35992
View on GitHub
TypeScript Difficulty: Medium

Parent Repository

langgenius/dify

TypeScript repository

140,829 22,101
All Issues Back to dify

Sign in required

Authenticate to use favourites & bookmarks

5