aws mcp-gateway-registry vulnerabilities, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 6.3CVE-2026-125926EPSS 0.3%
Server-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud ins…
- 8.7CVE-2026-100307EPSS 0.5%
Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might allow an authenticated remote user to assign the registry administrator scope to their own identity group and obtain administrat…