Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
stacklok records in CISA KEVNo stacklok vulnerabilities are listed in CISA KEV.
Priority HIGH 73
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · User interaction · EPSS 0.00372 · Published 2026-09-18 · Fixed in 0.30.1, 0.38.0 CWE-284
Priority HIGH 72
Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00593 · Published 2024-05-07 · Fixed in 0.0.48 CWE-400
Priority MEDIUM 55
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers.
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00429 · Published 2026-09-15 · Fixed in 0.31.0 CWE-918
Priority LOW 26
Minder is an open source Software Supply Chain Security Platform.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.0046 · Published 2024-06-18 · Fixed in 0.0.52 CWE-400
Priority LOW 25
Minder by Stacklok is an open source software supply chain security platform.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0053 · Published 2024-05-27 · Fixed in 0.0.51 CWE-770
Priority LOW 24
Minder is a software supply chain security platform.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00414 · Published 2024-05-20 · Fixed in 0.0.50 CWE-400
Priority LOW 24
Minder is a software supply chain security platform.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00465 · Published 2024-05-16 · Fixed in 0.0.49 CWE-400
Priority LOW 21
Minder by Stacklok is an open source software supply chain security platform.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00765 · Published 2024-04-09 · Fixed in 0.0.40 CWE-200
Priority LOW 14
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers.
CVSS 4.0LOW 2.9· Network · No auth · No interaction · EPSS 0.00327 · Published 2026-09-15 · Fixed in 0.29.1 CWE-918
Priority LOW 11
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers.
CVSS 4.0LOW 2.4· Local · Low privileges · User interaction · EPSS 0.00135 · Published 2025-05-12 · Fixed in 0.0.33 CWE-311
THREATIST.IORead the docs