Go/github.com/modelcontextprotocol/registry CVE-2026-45781: low 3.5, EPSS 0.23%
MCP Registry: OCI validator skips ownership check on upstream rate limits in github.com/modelcontextprotocol/registry
Action: Upgrade github.com/modelcontextprotocol/registry to 1.7.9 or later.
go get github.com/modelcontextprotocol/registry@v1.7.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.9 | - |
Fixed versions
| 1.7.9 |
Sources
- osv: GO-2026-5008
- nvd: CVE-2026-45781
- https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-2v5f-5r6w-p67r
CVE-2026-45781 · published · modified · JSON