mcp-gateway vulnerabilities

CVEs whose affected-version data names the mcp-gateway package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55887High· 8.7

1w ago

MCP Gateway allows easy and secure running and deployment of MCP servers

MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.metadata OCI image label into the broad catalog.Server stru…

▾ Twilightdocker · mcp-gatewayEPSS 0.20%via NVD