MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path in github.com/Kuadrant/mcp-gateway

概要

参考情報

• Kuadrant/mcp-gateway security advisory · ADVISORY

github.com/Kuadrant/mcp-gateway のその他の脆弱性

• GHSA-g53w-w6mj-hrpp緊急MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path