Go to main page
Versions in this module
v0
Oct 22, 2026
Oct 21, 2026
Oct 20, 2026
Oct 20, 2026
Oct 19, 2026
Oct 19, 2026
Oct 8, 2026
Oct 2, 2026
Oct 1, 2026
Sep 25, 2026
Sep 17, 2026
Sep 16, 2026
Aug 4, 2026
Sep 18, 2026
Sep 18, 2026
Sep 8, 2026
Sep 8, 2026
Sep 8, 2026
Sep 4, 2026
Sep 3, 2026
Sep 2, 2026
Sep 2, 2026
Sep 1, 2026
Aug 28, 2026
Aug 28, 2026
Aug 28, 2026
Aug 28, 2026
Aug 26, 2026
Aug 3, 2026
Jul 31, 2026
Jul 31, 2026
Aug 26, 2026
Jul 24, 2026
Jul 24, 2026
Jul 14, 2026
Jul 14, 2026
Jun 25, 2026
Jun 22, 2026
Jun 22, 2026
Jun 18, 2026
Jun 17, 2026
Jun 17, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jun 11, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jun 9, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jun 9, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jun 8, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 28, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 27, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 27, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 26, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 26, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 21, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 21, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 21, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 21, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 21, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 21, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 15, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 14, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 7, 2026 GO-2026-6522 +2 more
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 7, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 7, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 7, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 5, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 5, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 5, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 4, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
May 4, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 29, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 28, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 28, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 28, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 22, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 16, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 16, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 15, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 14, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Apr 14, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 22, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 22, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 19, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 19, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 4, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 4, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 3, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 3, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Feb 9, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Feb 4, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jan 27, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jan 27, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jan 21, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jan 21, 2026 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 18, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 18, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 16, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 13, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 4, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 3, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 3, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 3, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 2, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 2, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Nov 7, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Nov 7, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Nov 7, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Nov 6, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Oct 16, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Oct 16, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Sep 23, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Sep 22, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Sep 3, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Sep 2, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Aug 28, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Aug 21, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Aug 8, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Aug 8, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Aug 8, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Aug 7, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 25, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Mar 17, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Feb 6, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Feb 3, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jan 28, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jan 25, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Jan 24, 2025 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 19, 2024 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
Dec 18, 2024 GO-2026-5678 +3 more
GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot