mcp-contextforge-gateway
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server | mcp-contextforge-gateway | PyPI | Critical | Fix reported | |
| mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment | mcp-contextforge-gateway | PyPI | High | Fix reported | |
| ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`) | mcp-contextforge-gateway | PyPI | Medium | Fix reported |