Known Vulnerabilities for Mcp-gateway-registry by AWS
Listed below are 6 of the newest known vulnerabilities associated with "Mcp-gateway-registry" by "AWS".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125926 json | Server-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 mig... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-100307 json | Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might allow an authe... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-55546 json | QWED-MCP is a deterministic verification gateway for MCP. Prior to 0.2.1, verify_math_expression() in src/qwed_mcp/engines/ma... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-53717 json | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Pri... | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-53710 json | MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-53708 json | ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A... | Not Provided | 2026-09-14 | 2026-09-14 |