Advisories · Technology
AWS mcp-gateway-registry.
Every CVE that names AWS mcp-gateway-registry among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Server-side request forgery in the server registration and update API in mcp-gateway-registry
- AWS mcp-gateway-registry
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Missing authorization on the external management API in mcp-gateway-registry enables privilege escalation to registry administrator
- AWS mcp-gateway-registry
- Privilege escalation
- Broken access control
- CVSS 8.6 High
Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry
- AWS MCP Gateway & Registry
- SQL injection