{"items":[{"id":"CVE-2026-58197","published":"2026-09-18T16:34:55.213Z","updated":"2026-09-18T16:51:27.459Z","title":"ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement","severity":"HIGH","score":8.8,"vendor":"stacklok","product":"toolhive","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-58196","published":"2026-09-15T15:53:45.437Z","updated":"2026-09-15T17:27:27.029Z","title":"ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)","severity":"MEDIUM","score":4.7,"vendor":"stacklok","product":"toolhive","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2026-54450","published":"2026-09-15T15:47:39.377Z","updated":"2026-09-15T16:13:16.652Z","title":"ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway","severity":"LOW","score":2.9,"vendor":"stacklok","product":"toolhive","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2025-47274","published":"2025-05-12T14:57:46.781Z","updated":"2025-05-12T22:06:42.029Z","title":"ToolHive stores secrets in the state store with no encryption","severity":"LOW","score":2.4,"vendor":"stacklok","product":"toolhive","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2024-37904","published":"2024-06-18T17:07:02.812Z","updated":"2024-08-02T04:04:23.360Z","title":"Denial of service from maliciously configured Git repository in Minder","severity":"MEDIUM","score":5.7,"vendor":"stacklok","product":"minder","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2024-35238","published":"2024-05-27T17:12:20.570Z","updated":"2024-09-03T15:27:31.490Z","title":"Denial of service of Minder Server from maliciously crafted GitHub attestations","severity":"MEDIUM","score":5.3,"vendor":"stacklok","product":"minder","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2024-35194","published":"2024-05-20T20:44:10.562Z","updated":"2024-08-02T03:07:46.859Z","title":"Stacklok Minder vulnerable to denial of service from maliciously crafted templates","severity":"MEDIUM","score":5.3,"vendor":"stacklok","product":"minder","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2024-35185","published":"2024-05-16T15:15:13.530Z","updated":"2024-08-02T03:07:46.733Z","title":"Denial of service of Minder Server with attacker-controlled REST endpoint","severity":"MEDIUM","score":5.3,"vendor":"stacklok","product":"minder","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2024-34084","published":"2024-05-07T14:12:19.954Z","updated":"2024-08-02T02:42:59.894Z","title":"Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests","severity":"HIGH","score":7.5,"vendor":"stacklok","product":"minder","kev":false,"epss":0.00593,"kevAdded":null},{"id":"CVE-2024-31455","published":"2024-04-09T16:52:03.254Z","updated":"2024-08-02T01:52:56.973Z","title":"Minder GetRepositoryByName data leak","severity":"MEDIUM","score":4.3,"vendor":"stacklok","product":"minder","kev":false,"epss":0.00765,"kevAdded":null},{"id":"CVE-2024-27916","published":"2024-03-06T20:21:22.125Z","updated":"2024-08-02T19:39:30.349Z","title":"`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user","severity":"HIGH","score":7.1,"vendor":"stacklok","product":"minder","kev":false,"epss":0.00666,"kevAdded":null},{"id":"CVE-2024-27093","published":"2024-02-26T21:57:25.101Z","updated":"2024-08-27T19:43:28.099Z","title":"Minder trusts client-provided mapping from repo name to upstream ID","severity":"MEDIUM","score":4.6,"vendor":"stacklok","product":"minder","kev":false,"epss":0.00553,"kevAdded":null}]}