GHSA-c4hg-6933-x62xPublished
Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-34476 · Microsoft / collected KEV context
cve-program · CVE-2026-34476
euvd · EUVD-2026-21918
nvd · CVE-2026-34476
- https://lists.apache.org/thread/v0k1xyzzbtnpyrwxwyn36pbspr8rhjnr
- http://www.openwall.com/lists/oss-security/2026/04/13/4
osv · GHSA-c4hg-6933-x62x
- https://nvd.nist.gov/vuln/detail/CVE-2026-34476
- https://github.com/advisories/GHSA-c4hg-6933-x62x
- https://github.com/apache/skywalking-mcp
- https://lists.apache.org/thread/v0k1xyzzbtnpyrwxwyn36pbspr8rhjnr
- http://www.openwall.com/lists/oss-security/2026/04/13/4
osv · GO-2026-5310
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.