Affected by GO-2026-5678 and 3 other vulnerabilities

GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot

GO-2026-6522: Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot

GO-2026-6525: Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot

GO-2026-6530: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot

ui

package

v0.17.0 Latest Latest Go to latest Published: Mar 4, 2026 License: MIT Imports: 8 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/obot-platform/obot

Links

Open Source Insights

Documentation ¶

Index ¶

func Handler(devPort, userOnlyPort int) http.Handler

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Handler ¶

func Handler(devPort, userOnlyPort int) http.Handler

Types ¶

This section is empty.

Source Files ¶

View all Source files

handler.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL