Go/github.com/modelcontextprotocol/registry

MCP Registry has an unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist in github.com/modelcontextprotocol/registry

Modified: 6/25/2026

MCP Registry vulnerable to stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl` in github.com/modelcontextprotocol/registry

Modified: 6/25/2026

MCP Registry has open redirect via protocol-relative path in trailing-slash middleware in github.com/modelcontextprotocol/registry

Modified: 6/25/2026

MCP Registry: OCI validator skips ownership check on upstream rate limits

Modified: 9/10/2026

MCP Registry's GitHub OIDC tokens are replayable across registry deployments due to shared audience

Modified: 9/10/2026

MCP Registry has an unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist

Modified: 9/10/2026

MCP Registry vulnerable to stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`

Modified: 9/10/2026

MCP Registry has open redirect via protocol-relative path in trailing-slash middleware

Modified: 9/10/2026

MCP Registry: OCI validator skips ownership check on upstream rate limits in github.com/modelcontextprotocol/registry

Modified: 5/21/2026

MCP Registry's GitHub OIDC tokens are replayable across registry deployments due to shared audience in github.com/modelcontextprotocol/registry

Modified: 6/25/2026