github.com/obot-platform/obot
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Obot: MCP Registry API readable without authentication | github.com/obot-platform/obot | Go | Medium | Fix reported | |
| Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion | github.com/obot-platform/obot | Go | High | Fix reported | |
| Obot: Server-Side Request Forgery via remote MCP server URL | github.com/obot-platform/obot | Go | High | Fix reported | |
| Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server | github.com/obot-platform/obot | Go | Critical | Fix reported |