Affected by GO-2026-6002
and 1 other vulnerabilities
GO-2026-6002: ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive
GO-2026-6526: ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive
type AtMost struct {
// contains filtered or unexported fields
}
AtMost executes a function at most once per the configured interval.
Subsequent calls within the interval are silently skipped.
Safe for concurrent use from multiple goroutines.
Do calls fn if at least interval has elapsed since the last successful
invocation. Otherwise the call is silently skipped.
The first call always executes because last is initialized to zero,
which is treated as "never called".