CVE-2026-125926

A Server-side request forgery (SSRF) vulnerability exists in the server registration and update API of Amazon mcp-gateway-registry versions prior to 1.35.0 . This flaw may allow an authenticated remote user to submit a crafted request that forces the gateway to send requests to internal network s...