github.com/stacklok/toolhive
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
View on Github
Activity
- Latest release
- 18h ago
- Total releases
- 85
- Cadence
- ~2 days
- Last 12 months
- 60
Reach
- Stars
- 2.3k
Details
- First release
- Apr 09, 2025
| Version | Released | |
|---|---|---|
v0.59.0
minor
|
v0.59.0
minor
Dependencies (106)
+ 98 more |
|
v0.58.0
minor
|
v0.58.0
minor
Dependencies (106)
+ 98 more |
|
v0.57.0
minor
|
v0.57.0
minor
Dependencies (106)
+ 98 more |
|
v0.56.0
minor
|
v0.56.0
minor
Dependencies (106)
+ 98 more |
|
v0.55.2
patch
|
v0.55.2
patch
Dependencies (106)
+ 98 more |
|
v0.55.1
patch
|
v0.55.1
patch
Dependencies (106)
+ 98 more |
|
v0.55.0
minor
|
v0.55.0
minor
Dependencies (106)
+ 98 more |
|
v0.54.0
minor
|
v0.54.0
minor
Dependencies (106)
+ 98 more |
|
v0.53.0
minor
|
v0.53.0
minor
Dependencies (106)
+ 98 more |
|
v0.52.0
minor
|
v0.52.0
minor
Dependencies (106)
+ 98 more |
|
v0.51.4
patch
|
v0.51.4
patch
Dependencies (104)
+ 96 more |
|
v0.51.3
patch
|
v0.51.3
patch
Dependencies (104)
+ 96 more |
|
v0.51.2
patch
|
v0.51.2
patch
Dependencies (104)
+ 96 more |
|
v0.51.1
patch
|
v0.51.1
patch
Dependencies (104)
+ 96 more |
|
v0.51.0
minor
|
v0.51.0
minor
Dependencies (104)
+ 96 more |
|
v0.50.0
minor
|
v0.50.0
minor
Dependencies (104)
+ 96 more |
|
v0.49.0
minor
|
v0.49.0
minor
Dependencies (103)
+ 95 more |
|
v0.48.0
minor
|
v0.48.0
minor
Dependencies (102)
+ 94 more |
|
v0.47.1
patch
|
v0.47.1
patch
Dependencies (102)
+ 94 more |
|
v0.47.0
minor
|
v0.47.0
minor
Dependencies (102)
+ 94 more |
|
v0.46.0
minor
|
v0.46.0
minor
Dependencies (100)
+ 92 more |
|
v0.45.0
minor
|
v0.45.0
minor
Dependencies (100)
+ 92 more |
|
v0.44.0
minor
|
v0.44.0
minor
Dependencies (102)
+ 94 more |
|
v0.43.0
minor
|
v0.43.0
minor
Dependencies (102)
+ 94 more |
|
v0.42.1
patch
|
v0.42.1
patch
Dependencies (101)
+ 93 more |
|
v0.42.0
minor
|
v0.42.0
minor
Dependencies (101)
+ 93 more |
|
v0.41.0
minor
|
v0.41.0
minor
Dependencies (104)
+ 96 more |
|
v0.40.1
patch
|
v0.40.1
patch
Dependencies (98)
+ 90 more |
|
v0.40.0
minor
|
v0.40.0
minor
Dependencies (97)
+ 89 more |
|
v0.39.0
minor
|
v0.39.0
minor
Dependencies (98)
+ 90 more |
|
v0.38.0
minor
|
v0.38.0
minor
Dependencies (98)
+ 90 more |
|
v0.37.0
minor
|
v0.37.0
minor
Dependencies (98)
+ 90 more |
|
v0.36.0
minor
|
v0.36.0
minor
Dependencies (98)
+ 90 more |
|
v0.35.0
minor
|
v0.35.0
minor
Dependencies (98)
+ 90 more |
|
v0.34.0
minor
|
v0.34.0
minor
Dependencies (96)
+ 88 more |
|
v0.33.0
minor
|
v0.33.0
minor
Dependencies (96)
+ 88 more |
|
v0.32.0
minor
|
v0.32.0
minor
Dependencies (96)
+ 88 more |
|
v0.31.0
minor
|
v0.31.0
minor
Dependencies (96)
+ 88 more |
|
v0.30.1
patch
1 CVE
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.30.1
patch
Dependencies (96)
+ 88 more |
|
v0.30.0
minor
2 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.30.0
minor
Dependencies (96)
+ 88 more |
|
v0.29.3
patch
2 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.3
patch
Dependencies (96)
+ 88 more |
|
v0.29.2
patch
2 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.2
patch
Dependencies (96)
+ 88 more |
|
v0.29.1
patch
2 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.1
patch
Dependencies (96)
+ 88 more |
|
v0.29.0
minor
3 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.0
minor
Dependencies (96)
+ 88 more |
|
v0.28.3
patch
3 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.28.3
patch
Dependencies (97)
+ 89 more |
|
v0.28.2
patch
3 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.28.2
patch
Dependencies (97)
+ 89 more |
|
v0.28.0
minor
3 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.28.0
minor
Dependencies (97)
+ 89 more |
|
v0.17.0
minor
3 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.17.0
minor
Dependencies (90)
+ 82 more |
|
v0.16.0
minor
3 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.16.0
minor
Dependencies (88)
+ 80 more |
|
v0.13.0
minor
3 CVEs
CVE-2026-58197
GO-2026-6526
GHSA-qg2g-g9w3-m5h8
Sep 28, 2026
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive Fixed in
0.30.1
References
Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.13.0
minor
Dependencies (85)
+ 77 more |