Sstacklok

Products

Exploited and recent CVEs

• CVE-2026-58197 High 8.8 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement 0.4%
• CVE-2026-58197 High 8.8 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement 0.4%
• CVE-2026-58196 Medium 4.7 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) 0.4%
• CVE-2026-54450 Low 2.9 ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway 0.3%
• CVE-2025-47274 Low 2.4 ToolHive stores secrets in the state store with no encryption 0.1%
• CVE-2024-37904 Medium 5.7 Denial of service from maliciously configured Git repository in Minder 0.5%
• CVE-2024-35238 Medium 5.3 Denial of service of Minder Server from maliciously crafted GitHub attestations 0.5%
• CVE-2024-35194 Medium 5.3 Stacklok Minder vulnerable to denial of service from maliciously crafted templates 0.4%
• CVE-2024-35185 Medium 5.3 Denial of service of Minder Server with attacker-controlled REST endpoint 0.5%
• CVE-2024-34084 High 7.5 Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests 0.6%
• CVE-2024-31455 Medium 4.3 Minder GetRepositoryByName data leak 0.8%
• CVE-2024-27916 High 7.1 `GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user 0.7%
• CVE-2024-27093 Medium 4.6 Minder trusts client-provided mapping from repo name to upstream ID 0.6%