github.com/kuadrant/mcp-gateway
An envoy-based MCP Gateway that integrates with Istio and policy attachment mechanisms for authN, authZ, rate limiting and more.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 20
- Cadence
- ~11 days
- Last 12 months
- 19
Reach
- Stars
- 97
Details
- First release
- Sep 24, 2025
| Version | Released | |
|---|---|---|
v0.9.0
minor
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.9.0
minor
Dependencies (42)
+ 34 more |
|
v0.8.0
minor
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.8.0
minor
Dependencies (42)
+ 34 more |
|
v0.7.1
patch
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.7.1
patch
Dependencies (35)
+ 27 more |
|
v0.7.0
minor
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.7.0
minor
Dependencies (35)
+ 27 more |
|
v0.7.0-rc3
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.7.0-rc3
pre
Dependencies (35)
+ 27 more |
|
v0.7.0-rc2
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.7.0-rc2
pre
Dependencies (35)
+ 27 more |
|
v0.6.1
patch
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.6.1
patch
Dependencies (33)
+ 25 more |
|
v0.6.1-rc1
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.6.1-rc1
pre
Dependencies (33)
+ 25 more |
|
v0.6.0
minor
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.6.0
minor
Dependencies (33)
+ 25 more |
|
v0.6.0-rc2
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.6.0-rc2
pre
Dependencies (33)
+ 25 more |
|
v0.6.0-rc1
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.6.0-rc1
pre
Dependencies (33)
+ 25 more |
|
v0.5.1
patch
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.5.1
patch
Dependencies (33)
+ 25 more |
|
v0.5.1-rc1
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.5.1-rc1
pre
Dependencies (33)
+ 25 more |
|
v0.5.0
minor
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.5.0
minor
Dependencies (21)
+ 13 more |
|
v0.5.0-rc2
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.5.0-rc2
pre
Dependencies (21)
+ 13 more |
|
v0.5.0-rc1
pre
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.5.0-rc1
pre
Dependencies (21)
+ 13 more |
|
v0.4.2
patch
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.4.2
patch
Dependencies (21)
+ 13 more |
|
v0.4.1
minor
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.4.1
minor
Dependencies (18)
+ 10 more |
|
v0.1.2
patch
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.2
patch
Dependencies (14)
+ 6 more |
|
v0.1.1
initial
1 CVE
GO-2026-5390
GHSA-g53w-w6mj-hrpp
Jun 25, 2026
MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.1
initial
Dependencies (14)
+ 6 more |