Overview · INFOKOM-KI/Wazuh-MCP-Server · GitHub

Repository navigation

Security

No security policy detected

This project has not set up a SECURITY.md file yet.

Report a vulnerability

SSRF in blueteam_check_webshell — advertised "SSRF Protection" only rejects literal IPs, never resolves hostnames, so any DNS name resolving to a private/loopback/link-local address (incl. cloud metadata) bypasses it
GHSA-pw2j-pj4h-f5vg published Sep 3, 2026 by INFOKOM-KI

High

Learn more about advisories related to INFOKOM-KI/Wazuh-MCP-Server in the GitHub Advisory Database