http://2130706433/ is a valid URL. Your browser will happily resolve it to 127.0.0.1, because the WHATWG URL parser normalizes decimal, hex (0x7f000001), and octal integer forms into dotted-quad IPv4.
Our SSRF guard did not know that. It resolved hostnames through DNS and range-checked the resulting addresses — but Node never routes an IP literal through lookup, so a URL whose host was already an IP sailed straight past the check. Loopback, link-local, cloud metadata: all reachable, in a server whose entire job is fetching URLs a model picked for you.
That is one bug out of the seven-phase internal audit that became CrawlForge MCP Server v5.0.0. The unit suite went from 480 tests to 914. npm audit went from 16 vulnerabilities to 0. Almost none of it is new features.
Table of contents
What actually shipped
