{"action":"Upgrade github.com/docker/mcp-gateway to 0.28.0 or later.","affected":[{"fixed":"0.28.0","introduced":"0"}],"component":"github.com/docker/mcp-gateway","cve_ids":["CVE-2025-64443"],"ecosystem":"Go","epss":0.00425,"exploited":false,"fixed_versions":["0.28.0"],"ghsa_id":"GHSA-46gc-mwh4-cc5r","id":"tcs_01M5KEW0TPYYYFMBJAXJXNPZCW","modified_at":"2025-12-09T17:57:50.930084Z","published_at":"2025-12-03T16:07:31Z","references":["https://osv.dev/vulnerability/GHSA-46gc-mwh4-cc5r","https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r","https://nvd.nist.gov/vuln/detail/CVE-2025-64443","https://github.com/docker/mcp-gateway/pull/190","https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e","https://github.com/docker/mcp-gateway/commit/fe073985c8eb6e0c9317d2f198c07686f70ea06d","https://github.com/docker/mcp-gateway","https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#security-warning"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-46gc-mwh4-cc5r","url":"https://osv.dev/vulnerability/GHSA-46gc-mwh4-cc5r"}],"summary":"Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode"}