Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/19 3:39 p.m.12 views

MCP Registry: OCI validator skips ownership check on upstream rate limits

OCI ownership validation fails open on upstream rate limits, allowing attacker to claim arbitrary public OCI images under their own namespace Severity: Low re-scored post-triage; see Maintainer triage note below Affected: modelcontextprotocol/registry main branch at commit fe0cb3b current HEAD as...

3.5CVSS6AI score0.00206EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder