registry / @tadmstr/searxng-mcp / 3.14.0

@tadmstr/searxng-mcp@3.14.0

MCP server for SearXNG — private web search for Claude Code

AI Security Review

scanned 9h ago · by lpm-firewall-ai

The runtime MCP fetch tool accepts URLs and performs outbound HTTP requests. Its private-address protection is hostname-pattern based, so a public hostname resolving to a private address can bypass the check.

Static reason

No blocking static signals were detected.

Trigger

A client invokes a URL-fetching MCP tool against an attacker-controlled hostname.

Impact

Possible access to internal HTTP services or cloud metadata reachable from the running host.

Mechanism

Hostname-only SSRF filtering before Node fetch DNS resolution.

Rationale

Source inspection finds a package-aligned search/fetch MCP server, not malicious behavior. The unresolved hostname-only SSRF guard is a security risk requiring a warning.

Evidence

package.jsonbuild/src/index.jsbuild/src/fetch-utils.jsbuild/src/tiers/raw.jsbuild/src/config.jsbuild/src/tools.jsbuild/src/ollama.jsbuild/src/events.jsbuild/src/domain-snapshot.jsbuild/src/cli/domain-db-maintenance.jsbuild/src/cli/restore-domain-db.js

Decision evidence

public snapshot

AI called this at 86.0% confidence with false-positive risk.

@tadmstr/searxng-mcp@3.14.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code