{"vulnerability": "GHSA-m5m2-mrxf-7j7q", "sightings": [{"uuid": "a2e0b0ed-8732-47cb-a5e1-f042bf7b7b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m5m2-mrxf-7j7q", "type": "seen", "source": "https://gist.github.com/Correctover/e98078382935c28832271fc5a8e21606", "content": "{\n  \"events\": [\n    {\n      \"ts\": \"2026-07-26T10:00:00Z\",\n      \"type\": \"GHSA\",\n      \"fw\": \"docker/mcp-gateway\",\n      \"sev\": \"critical\",\n      \"msg\": \"SSRF via remote URL handling \u2014 GHSA-625j-rw87-4ghr\",\n      \"source\": \"github.com/advisories\"\n    },\n    {\n      \"ts\": \"2026-07-26T10:01:00Z\",\n      \"type\": \"GHSA\",\n      \"fw\": \"docker/mcp-gateway\",\n      \"sev\": \"critical\",\n      \"msg\": \"Path traversal via file:// reference \u2014 GHSA-6pq5-p7fc-7xhq\",\n      \"source\": \"github.com/advisories\"\n    },\n    {\n      \"ts\": \"2026-07-26T10:02:00Z\",\n      \"type\": \"GHSA\",\n      \"fw\": \"docker/mcp-gateway\",\n      \"sev\": \"critical\",\n      \"msg\": \"Container volume bind mount \u2192 RCE \u2014 GHSA-6m8f-w97w-99h7\",\n      \"source\": \"github.com/advisories\"\n    },\n    {\n      \"ts\": \"2026-07-26T10:03:00Z\",\n      \"type\": \"GHSA\",\n      \"fw\": \"docker/mcp-gateway\",\n      \"sev\": \"high\",\n      \"msg\": \"Tool name collision across servers \u2014 GHSA-m5m2-mrxf-7j7q\",\n      \"source\": \"github.com/advisories\"\n    },\n    {\n      \"ts\": \"2026-07-26T10:04:00Z\",\n      \"type\": \"GHSA\",\n      \"fw\": \"docker/mcp-gateway\",\n      \"sev\": \"high\",\n      \"msg\": \"Container image signature bypass \u2014 GHSA-g879-4j4f-6vj7\",\n      \"source\": \"github.com/advisories\"\n    },\n    {\n      \"ts\": \"2026-07-26T10:05:00Z\",\n      \"type\": \"GHSA\",\n      \"fw\": \"docker/mcp-gateway\",\n      \"sev\": \"high\",\n      \"msg\": \"Container /sse /mcp unauthenticated \u2014 GHSA-g879-4j4f-6vj7\",\n      \"source\": \"github.com/advisories\"\n    },\n    {\n      \"ts\": \"2026-07-23T08:00:00Z\",\n      \"type\": \"GHSA\",\n      \"fw\": \"aws-api-mcp-server\",\n      \"sev\": \"high\",\n      \"msg\": \"Security policy silent bypass \u2014 GHSA-29w2-fq35-v728 (CVSS 7.3)\",\n      \"source\": \"github.com/advisories\"\n    },\n    {\n      \"ts\": \"2026-07-25T06:00:00Z\",\n      \"type\": \"CVE\",\n      \"fw\": \"ChromaDB\",\n      \"sev\": \"high\",\n      \"msg\": \"SSRF vulnerability disclosed \u2014 CVE submitted\",\n      \"source\": \"public disclosure\"\n    },\n    {\n      \"ts\": \"2026-07-25T06:10:00Z\",\n      \"type\": \"CVE\",\n      \"fw\": \"Qdrant\",\n      \"sev\": \"high\",\n      \"msg\": \"SSRF vulnerability disclosed \u2014 CVE submitted\",\n      \"source\": \"public disclosure\"\n    },\n    {\n      \"ts\": \"2026-07-25T06:20:00Z\",\n      \"type\": \"CVE\",\n      \"fw\": \"Weaviate\",\n      \"sev\": \"high\",\n      \"msg\": \"Path traversal \u2014 CVE submitted\",\n      \"source\": \"public disclosure\"\n    },\n    {\n      \"ts\": \"2026-07-25T12:00:00Z\",\n      \"type\": \"VULN\",\n      \"fw\": \"Casdoor\",\n      \"sev\": \"critical\",\n      \"msg\": \"CVSS 9.1 Critical vulnerability identified\",\n      \"source\": \"ecosystem scan\"\n    },\n    {\n      \"ts\": \"2026-07-23T14:00:00Z\",\n      \"type\": \"MERGE\",\n      \"fw\": \"awesome-mcp-servers\",\n      \"sev\": \"low\",\n      \"msg\": \"PR #8776 merged \u2014 CCS listed in official MCP registry\",\n      \"source\": \"github.com\"\n    },\n    {\n      \"ts\": \"2026-07-27T02:00:00Z\",\n      \"type\": \"RATING\",\n      \"fw\": \"Glama\",\n      \"sev\": \"low\",\n      \"msg\": \"AAA rated \u2014 License \u00b7 Quality \u00b7 Maintenance all A\",\n      \"source\": \"glama.ai\"\n    },\n    {\n      \"ts\": \"2026-07-12T10:00:00Z\",\n      \"type\": \"RELEASE\",\n      \"fw\": \"ccs-sdk\",\n      \"sev\": \"low\",\n      \"msg\": \"ZDI first submission \u00b7 ccs-sdk npm full release (MIT)\",\n      \"source\": \"npmjs.com\"\n    },\n    {\n      \"ts\": \"2026-07-24T08:00:00Z\",\n      \"type\": \"RELEASE\",\n      \"fw\": \"CCS Standard\",\n      \"sev\": \"low\",\n      \"msg\": \"v1.2 published \u00b7 DOI 10.5281/zenodo.21603250\",\n      \"source\": \"zenodo.org\"\n    },\n    {\n      \"ts\": \"2026-07-27T18:00:00Z\",\n      \"type\": \"GOV\",\n      \"fw\": \"crewAI\",\n      \"sev\": \"low\",\n      \"msg\": \"Governance monitoring \u2014 #4877(299) #5802(112) #6025(110)\",\n      \"source\": \"github.com\"\n    },\n    {\n      \"ts\": \"2026-07-27T18:00:00Z\",\n      \"type\": \"GOV\",\n      \"fw\": \"autogen\",\n      \"sev\": \"low\",\n      \"msg\": \"Governance monitoring \u2014 #7353(394) #7372(53) #7405(97)\",\n      \"source\": \"github.com\"\n    },\n    {\n      \"ts\": \"2026-07-27T18:00:00Z\",\n      \"type\": \"GOV\",\n      \"fw\": \"langgraph\",\n      \"sev\": \"low\",\n      \"msg\": \"Governance monitoring \u2014 #5672(28)\",\n      \"source\": \"github.com\"\n    },\n    {\n      \"ts\": \"2026-07-24T04:00:00Z\",\n      \"type\": \"AUDIT\",\n      \"fw\": \"Dify\",\n      \"sev\": \"critical\",\n      \"msg\": \"17 issues: SSRF + auth bypass (4 crit, 7 high, 6 med)\",\n      \"source\": \"security audit\"\n    },\n    {\n      \"ts\": \"2026-07-24T04:10:00Z\",\n      \"type\": \"AUDIT\",\n      \"fw\": \"CrewAI\",\n      \"sev\": \"critical\",\n      \"msg\": \"15 issues: Code injection via prompt (4 crit, 5 high)\",\n      \"source\": \"security audit\"\n    },\n    {\n      \"ts\": \"2026-07-24T04:20:00Z\",\n      \"type\": \"AUDIT\",\n      \"fw\": \"Milvus/Zilliz\",\n      \"sev\": \"critical\",\n      \"msg\": \"16 issues: gRPC admin unauth (5 crit, 6 high)\",\n      \"source\": \"security audit\"\n    },\n    {\n      \"ts\": \"2026-07-24T04:30:00Z\",\n      \"type\": \"AUDIT\",\n      \"fw\": \"AutoGen\",\n      \"sev\": \"critical\",\n      \"msg\": \"18 issues: Sandbox escape path (4 crit, 7 high)\",\n      \"source\": \"security audit\"\n    },\n    {\n      \"ts\": \"2026-07-24T04:40:00Z\",\n      \"type\": \"AUDIT\",\n      \"fw\": \"Anthropic MCP\",\n      \"sev\": \"critical\",\n      \"msg\": \"13 issues: RCE via tool params (3 crit, 5 high)\",\n      \"source\": \"security audit\"\n    },\n    {\n      \"ts\": \"2026-07-24T04:50:00Z\",\n      \"type\": \"AUDIT\",\n      \"fw\": \"LangChain\",\n      \"sev\": \"high\",\n      \"msg\": \"12 issues: Arbitrary code execution (3 crit, 4 high)\",\n      \"source\": \"security audit\"\n    }\n  ],\n  \"fault_distribution\": {\n    \"\u7f51\u7edc\u5c42\": 6,\n    \"\u8ba4\u8bc1\u5c42\": 7,\n    \"\u8bf7\u6c42\u5c42\": 10,\n    \"\u54cd\u5e94\u5c42\": 8,\n    \"\u7cfb\u7edf\u5c42\": 7,\n    \"\u4e1a\u52a1\u5c42\": 6,\n    \"\u8ba2\u9605\u5c42\": 8,\n    \"\u63d0\u4f9b\u5546\u7a33\u5b9a\u6027\": 4,\n    \"\u7279\u6b8a\u6545\u969c\": 81,\n    \"\u7248\u672c\u8fed\u4ee3\u8865\u5145\": 570\n  },\n  \"framework_vulns\": {\n    \"Dify\": {\n      \"total\": 17,\n      \"crit\": 4,\n      \"high\": 7,\n      \"med\": 6,\n      \"key\": \"SSRF + auth bypass\"\n    },\n    \"CrewAI\": {\n      \"total\": 15,\n      \"crit\": 4,\n      \"high\": 5,\n      \"med\": 6,\n      \"key\": \"Code injection\"\n    },\n    \"Milvus/Zilliz\": {\n      \"total\": 16,\n      \"crit\": 5,\n      \"high\": 6,\n      \"med\": 5,\n      \"key\": \"gRPC unauth\"\n    },\n    \"Weaviate\": {\n      \"total\": 14,\n      \"crit\": 3,\n      \"high\": 5,\n      \"med\": 6,\n      \"key\": \"GraphQL injection\"\n    },\n    \"LangChain\": {\n      \"total\": 12,\n      \"crit\": 3,\n      \"high\": 4,\n      \"med\": 5,\n      \"key\": \"Code execution\"\n    },\n    \"AutoGen\": {\n      \"total\": 18,\n      \"crit\": 4,\n      \"high\": 7,\n      \"med\": 7,\n      \"key\": \"Sandbox escape\"\n    },\n    \"LangGraph\": {\n      \"total\": 11,\n      \"crit\": 2,\n      \"high\": 4,\n      \"med\": 5,\n      \"key\": \"State poisoning\"\n    },\n    \"Semantic Kernel\": {\n      \"total\": 9,\n      \"crit\": 2,\n      \"high\": 3,\n      \"med\": 4,\n      \"key\": \"Plugin auth\"\n    },\n    \"OpenAI Agents\": {\n      \"total\": 8,\n      \"crit\": 2,\n      \"high\": 3,\n      \"med\": 3,\n      \"key\": \"Tool injection\"\n    },\n    \"Anthropic MCP\": {\n      \"total\": 13,\n      \"crit\": 3,\n      \"high\": 5,\n      \"med\": 5,\n      \"key\": \"RCE params\"\n    },\n    \"Coze/\u6263\u5b50\": {\n      \"total\": 10,\n      \"crit\": 2,\n      \"high\": 4,\n      \"med\": 4,\n      \"key\": \"SSRF + escape\"\n    },\n    \"MetaGPT\": {\n      \"total\": 7,\n      \"crit\": 1,\n      \"high\": 3,\n      \"med\": 3,\n      \"key\": \"Role injection\"\n    },\n    \"Docker MCP GW\": {\n      \"total\": 6,\n      \"crit\": 3,\n      \"high\": 2,\n      \"med\": 1,\n      \"key\": \"Container RCE\"\n    },\n    \"AWS MCP Srv\": {\n      \"total\": 3,\n      \"crit\": 1,\n      \"high\": 1,\n      \"med\": 1,\n      \"key\": \"Policy bypass\"\n    }\n  },\n  \"arsenal\": {\n    \"total_vulns\": 362,\n    \"frameworks\": 47,\n    \"patterns\": 128,\n    \"ghsa\": 15,\n    \"src\": 53,\n    \"cve\": 3\n  },\n  \"updated_at\": \"2026-07-27T11:51:32Z\"\n}", "creation_timestamp": "2026-07-27T11:51:46.740466Z"}]}