IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`)

• CVE-2026-18905 High 7.7 IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation 0.5%