Skip to content
OpenAdvisories

Package · Go

github.com/docker/mcp-gateway

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-55887

    MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway

    MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.metadata OCI image label into the broad catalog.Server structure for direct docke…

    Docker mcp-gateway github.com/docker/mcp-gateway Go
  • High 7.3
    CVE-2025-64443

    DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode

    MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious websit…

    Docker mcp-gateway github.com/docker/mcp-gateway Go