Threats tagged 'ghsa-r7mv-8vcv-gjv6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-94407IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncontrolled Medium6.52026-11-14GCVE DatabaseCVE-2026-94407 IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain a vulnerability that allows an authenticated user with tool-registration privileges to cause a denial of service. This occurs due to uncontrolled regular expression complexity (ReDoS) in the JSON Schema pattern field, which can lead to excessive CPU consumption during argument validation, potentially degrading gateway availability. Report on CVE-2026-94407 Vulnerability CWE-1333 #ghsa-r7mv-8vcv-gjv6	GCVE Database	2026-11-14

Page 1 of 1