SSRF via URL override and GraphQL input

SSRF and GraphQL expression injection in Apache SkyWalking MCP 0.1.0 allow remote attackers to steer backend requests and queries. Apache's record names the set_skywalking_url tool and GraphQL expression handling; public 0.2.0 release notes and the current README show that the server was changed to ignore request-level URL overrides on HTTP transports, validate OAP URL schemes, remove an unused tool and parameter, and validate tool configuration properties, indicating that untrusted tool input reached outbound GraphQL requests and query execution. Risk is highest when the SSE or streamable MCP transports are reachable over a network; stdio-only deployments reduce the remote SSRF surface, but the published advisory still treats the combined flaw as remotely reachable without prior authentication.