Skip to content
OpenAdvisories

Package · Go

github.com/stacklok/toolhive

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-58196

    ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)

    ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer in pkg/auth/discovery…

    stacklok toolhive github.com/stacklok/toolhive Go