Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/14 3:56 p.m.6 views

CVE-2026-53708 ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validategatewaytesturl in mcpgateway/common/validators.py to...

6.6CVSS5.5AI score
SaveExploits0References5
Rows per page
Query Builder