Google, JPMorgan, Weaviate, France’s DINUM and an Indonesian city fixed the same SSRF flaw in their MCP servers, researcher ...