Security: IBM/mcp-context-forge
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Parse-gap bypasses in mcp-context-forge: SQL Sanitizer (privesc/DROP/mass-DELETE) and resource_filter SSRFGHSA-9qxh-fpx5-vxvw published
Aug 25, 2026 by brian-husseyHigh -
Scoped admin OAuth DCR endpoints ignore token_teams restrictions and expose global registered clientsGHSA-gj7g-7r6g-jc8v published
Aug 25, 2026 by brian-husseyModerate -
Server-Side Request Forgery (SSRF) in url_to_markdown_server via Unvalidated URL FetchingGHSA-gv3m-3mvj-w6f2 published
Aug 25, 2026 by brian-husseyCritical -
Server-Side Request Forgery (SSRF) in mcp-rss-search via Unvalidated URL FetchingGHSA-578v-pgw5-36gv published
Aug 25, 2026 by brian-husseyHigh -
Scoped admin OAuth DCR endpoints ignore token_teams restrictions and expose global registered clientsGHSA-w8vq-gj3v-h664 published
Sep 2, 2026 by brian-husseyModerate -
ContextForge MCP Gateway: predictable default JWT signing key ("changeme") accepted in the default environment enables authentication bypassGHSA-5424-f25v-29r8 published
Aug 24, 2026 by brian-husseyHigh -
Session auth-context reuse ignores JWT exp — expired JWT replayable within session_auth_reuse_ttlGHSA-hxq2-5h3j-jqjv published
Aug 25, 2026 by brian-husseyModerate -
Cross-tenant read of plugin-binding policies (BOLA) in ContextForge MCP GatewayGHSA-55gx-p285-xw7f published
Aug 25, 2026 by brian-husseyHigh -
Default JWT Secret in Docker Compose Enables Forged Platform-Admin TokensGHSA-8pcq-mx48-hjvj published
Aug 25, 2026 by brian-husseyCritical -
Root service accepts arbitrary file:// and unrestricted scheme URIs with project-acknowledged absence of access checks, exposing them to all admin sessions without per-team segmentationGHSA-x39c-q2jx-f325 published
Aug 24, 2026 by brian-husseyModerate