AWS HealthLake MCP Server SSRF Vulnerability Requires Immediate Update
AWS HealthLake MCP Server versions before 0.0.14 have a critical SSRF flaw (CVE-2026-15643) in pagination handling. Attackers can exploit unvalidated next_token parameters to redirect requests and steal AWS credentials. **Action required**: upgrade to version 0.0.14 or later immediately if you're running this service.