Skip to content
OpenAdvisories

Package · Go

github.com/obot-platform/obot

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Obot before v0.23.0 Authentication Bypass via Registry API

    Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connec…