IBM mcp-context-forge

• CVE-2026-53711 Medium 5.1 MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI 0.4%
• CVE-2026-53709 Critical 9.8 MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 0.6%
• CVE-2026-53710 Critical 10.0 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server 1.1%
• CVE-2026-53708 Medium 6.6 ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`) 0.4%