Affected by GO-2026-5996
and 1 other vulnerabilities
GO-2026-5996: ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive
GO-2026-6002: ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive
directory
Version:
v0.19.0
Opens a new window with list of versions in this module.
Published: Apr 13, 2026
License: Apache-2.0
Opens a new window with license information.
Directories
¶
|
|
|
Package testutil provides shared helpers for operator E2E tests.
|
Package testutil provides shared helpers for operator E2E tests. |
Package virtualmcp provides helper functions for VirtualMCP E2E tests.
|
Package virtualmcp provides helper functions for VirtualMCP E2E tests. |
Click to show internal directories.
Click to hide internal directories.