mcp-contextforge-gateway vulnerabilities (PyPI)
3 vulnerabilities.
-
mcp-contextforge-gatewayPyPI mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment No score -
mcp-contextforge-gatewayPyPI MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server 10.0 Critical -
mcp-contextforge-gatewayPyPI ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`) 6.6 Medium