Four vendors, one bad assumption: SSRF in MCP servers

There is a particular kind of bug that you only recognize the third time you see it. The first time,...