Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

modelcontextprotocol/registry

              main @ 535941a
            

Fixes

CVEs

HIGH

Peak severity

57.9%

Coverage

Highlights

Auth Bypass: 8 prior fixes. Scrutinize any change in this area.

.github/workflows: most-fixed (2 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Upstream registry rate-limiting (HTTP 429) caused the OCI package validator to fail open. This allowed unauthorized publishers to bypass ownership checks and hijack arbitrary public OCI namespaces. This is tracked under CVE-2026-45781.

SSRF: Incomplete IP blocklisting and DNS resolution logic in HTTP namespace verification allowed attackers to execute SSRF and DNS rebinding attacks, exposing internal systems. Tunneling bypasses included IPv6 6to4 and NAT64 routing, tracked under CVE-2026-44430.

Auth Bypass: The GitHub Actions OIDC token exchange utilized a static, global audience string. This lack of deployment-specific binding allowed attackers to replay tokens across different registry deployments (CVE-2026-44428).