github.com/stacklok/toolhive
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
View on Github
Activity
- Latest release
- 2d ago
- Total releases
- 69
- Cadence
- ~5 days
- Last 12 months
- 45
Reach
- Stars
- 2.2k
Details
- First release
- Apr 09, 2025
| Version | Released | |
|---|---|---|
v0.49.0
minor
|
v0.49.0
minor
Dependencies (103)
+ 95 more |
|
v0.48.0
minor
|
v0.48.0
minor
Dependencies (102)
+ 94 more |
|
v0.47.1
patch
|
v0.47.1
patch
Dependencies (102)
+ 94 more |
|
v0.47.0
minor
|
v0.47.0
minor
Dependencies (102)
+ 94 more |
|
v0.46.0
minor
|
v0.46.0
minor
Dependencies (100)
+ 92 more |
|
v0.45.0
minor
|
v0.45.0
minor
Dependencies (100)
+ 92 more |
|
v0.44.0
minor
|
v0.44.0
minor
Dependencies (102)
+ 94 more |
|
v0.43.0
minor
|
v0.43.0
minor
Dependencies (102)
+ 94 more |
|
v0.42.1
patch
|
v0.42.1
patch
Dependencies (101)
+ 93 more |
|
v0.42.0
minor
|
v0.42.0
minor
Dependencies (101)
+ 93 more |
|
v0.41.0
minor
|
v0.41.0
minor
Dependencies (104)
+ 96 more |
|
v0.40.1
patch
|
v0.40.1
patch
Dependencies (98)
+ 90 more |
|
v0.40.0
minor
|
v0.40.0
minor
Dependencies (97)
+ 89 more |
|
v0.39.0
minor
|
v0.39.0
minor
Dependencies (98)
+ 90 more |
|
v0.38.0
minor
|
v0.38.0
minor
Dependencies (98)
+ 90 more |
|
v0.37.0
minor
|
v0.37.0
minor
Dependencies (98)
+ 90 more |
|
v0.36.0
minor
|
v0.36.0
minor
Dependencies (98)
+ 90 more |
|
v0.35.0
minor
|
v0.35.0
minor
Dependencies (98)
+ 90 more |
|
v0.34.0
minor
|
v0.34.0
minor
Dependencies (96)
+ 88 more |
|
v0.33.0
minor
|
v0.33.0
minor
Dependencies (96)
+ 88 more |
|
v0.32.0
minor
|
v0.32.0
minor
Dependencies (96)
+ 88 more |
|
v0.31.0
minor
|
v0.31.0
minor
Dependencies (96)
+ 88 more |
|
v0.30.1
patch
1 CVE
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.30.1
patch
Dependencies (96)
+ 88 more |
|
v0.30.0
minor
1 CVE
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.30.0
minor
Dependencies (96)
+ 88 more |
|
v0.29.3
patch
1 CVE
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.3
patch
Dependencies (96)
+ 88 more |
|
v0.29.2
patch
1 CVE
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.2
patch
Dependencies (96)
+ 88 more |
|
v0.29.1
patch
1 CVE
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.1
patch
Dependencies (96)
+ 88 more |
|
v0.29.0
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.29.0
minor
Dependencies (96)
+ 88 more |
|
v0.28.3
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.28.3
patch
Dependencies (97)
+ 89 more |
|
v0.28.2
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.28.2
patch
Dependencies (97)
+ 89 more |
|
v0.28.0
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.28.0
minor
Dependencies (97)
+ 89 more |
|
v0.17.0
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.17.0
minor
Dependencies (90)
+ 82 more |
|
v0.16.0
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.16.0
minor
Dependencies (88)
+ 80 more |
|
v0.13.0
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.13.0
minor
Dependencies (85)
+ 77 more |
|
v0.12.4
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.12.4
patch
Dependencies (85)
+ 77 more |
|
v0.12.1
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.12.1
minor
Dependencies (84)
+ 76 more |
|
v0.11.1
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.11.1
minor
Dependencies (84)
+ 76 more |
|
v0.9.4
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.9.4
minor
Dependencies (85)
+ 77 more |
|
v0.8.2
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.8.2
minor
Dependencies (72)
+ 64 more |
|
v0.6.17
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.6.17
patch
Dependencies (70)
+ 62 more |
|
v0.6.11
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.6.11
patch
Dependencies (70)
+ 62 more |
|
v0.6.8
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.6.8
patch
Dependencies (70)
+ 62 more |
|
v0.6.7
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.6.7
patch
Dependencies (70)
+ 62 more |
|
v0.6.4
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.6.4
minor
Dependencies (69)
+ 61 more |
|
v0.4.2
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.4.2
minor
Dependencies (64)
+ 56 more |
|
v0.3.2
minor
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.3.2
minor
Dependencies (63)
+ 55 more |
|
v0.2.17
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.2.17
patch
Dependencies (62)
+ 54 more |
|
v0.2.16
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.2.16
patch
Dependencies (63)
+ 55 more |
|
v0.2.12
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.2.12
patch
Dependencies (63)
+ 55 more |
|
v0.2.9
patch
2 CVEs
CVE-2026-54450
GO-2026-5996
GHSA-pph6-vfjv-vpjw
Jul 17, 2026
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive Fixed in
0.29.1
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-58196
GO-2026-6002
GHSA-pr64-jmmf-jp54
Jul 17, 2026
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive Fixed in
0.31.0
Updated Jul 21, 2026 · Source: OSV.dev |
v0.2.9
patch
Dependencies (61)
+ 53 more |