Login Request a demo
MR
Product
Mcp Registry
by Lfprojects · last CVE May 14, 2026
3
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mcp Registry to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44429
5.4
0%
May 14
MCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`
Affected: before 1.7.7
CVE-2026-44428
4.7
0%
May 14
MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience
Affected: before 1.7.6
CVE-2026-44430
4.0
0%
May 14
MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist
Affected: before 1.7.7
Showing 3