Apify token exposure via authority injection

SSRF in Apify MCP Server before 0.10.11 allows attackers to expose an Apify API token via a malicious Actor definition. getActorMCPServerURL in src/mcp/actors.ts appends the attacker-controlled webServerMcpPath to a trusted standby URL without resolving and enforcing the resulting origin, so a userinfo-style authority value can redirect connectMCPClient to an attacker host that receives the Authorization bearer token. Exploitation requires a victim to invoke or inspect the malicious Actor through the call-actor, fetch-actor-details, or actor-mcp tool-loading paths, after which the stolen token can be used to access Actors, stored data, and billable compute.