Ibm Mcp-context-forge vulnerabilities
- ibm mcp-context-forge MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI 5.1 Medium
- ibm mcp-context-forge MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 9.8 Critical
- ibm mcp-context-forge MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server 10.0 Critical
- ibm mcp-context-forge, mcp-contextforge-gateway +1 more ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`) 6.6 Medium