MEDIUM6.6PyPI
GHSA-9hgc-g3w5-67cm· CVE-2026-53708, PYSEC-2026-3684ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Modified: 8/19/2026
package
PyPI/mcp-contextforge-gateway
pkg:pypi/mcp-contextforge-gateway
HIGHPyPI
GHSA-vwf3-4xxj-qg6hmcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment
Modified: 8/26/2026
CRITICAL10.0PyPI
GHSA-xm98-3vcf-fph7· CVE-2026-53710, PYSEC-2026-3862mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
Modified: 9/10/2026
MEDIUM6.6PyPI
PYSEC-2026-3684· CVE-2026-53708, GHSA-9hgc-g3w5-67cmContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Modified: 8/19/2026
CRITICAL10.0PyPI
PYSEC-2026-3862· CVE-2026-53710, GHSA-xm98-3vcf-fph7mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
Modified: 9/10/2026