Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/05/19 3:39 p.m.•22 views

MCP Registry: OCI validator skips ownership check on upstream rate limits

OCI ownership validation fails open on upstream rate limits, allowing attacker to claim arbitrary public OCI images under their own namespace Severity: Low re-scored post-triage; see Maintainer triage note below Affected: modelcontextprotocol/registry main branch at commit fe0cb3b current HEAD as...

3.5CVSS8.1AI score0.00249EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder