Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/stacklok/toolhive

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/stacklok/toolhive in go

Low
about 4 hours ago

ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) GSA_kwCzR0hTQS1wcjY0LWptbWYtanA1NM4ABbBi

go github.com/stacklok/toolhive
Low
about 6 hours ago

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway GSA_kwCzR0hTQS1wcGg2LXZmanYtdnBqd84ABbBI

go github.com/stacklok/toolhive

Filter by Severity

Low 2