VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/docker/mcp-gateway: vulnerability history, versions and safety

github.com/docker/mcp-gateway is a package in the Go ecosystem. Vulert records 4 vulnerabilities for it across 120 releases, from Dec 2025 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
4 vulnerabilities recorded H2 U2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
4 in the last 12 months

Most recent disclosure 25 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/docker/mcp-gateway vulnerabilities

Vulert verdict on github.com/docker/mcp-gateway v0.44.2 i

Updated on 23 Oct 2026

Action needed: v0.44.2 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 77/100
  • Security Some issues to review
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.44.2 — affected i
  • Vulnerabilities on record 4 over 1 year · 4 in the last year i
  • Latest disclosure 25 Jun 2026 i
  • Highest CVSS 8.7 i
  • With no published fix 0 i
  • Stars 1,611 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/docker/mcp-gateway, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.44.2 21 Oct 2026 H1 U1 MIT Yes Details →
v0.0.0-20260916184705-a34df45d4ec0 16 Sep 2026 H1 U1 MIT Yes Details →
v0.43.4-0.20260916184705-a34df45d4ec0 16 Sep 2026 H1 U1 MIT Yes Details →
v0.44.1 16 Sep 2026 H1 U1 MIT Yes Details →
v0.0.0-20260826164905-a21c0ac1c1e7 26 Aug 2026 H1 U1 MIT Yes Details →
v0.43.4-0.20260826164905-a21c0ac1c1e7 26 Aug 2026 H1 U1 MIT Yes Details →
v0.0.0-20260821232701-8511ffe92f30 21 Aug 2026 H1 U1 MIT Yes Details →
v0.43.4-0.20260821232701-8511ffe92f30 21 Aug 2026 H1 U1 MIT Yes Details →
v0.0.0-20260811180155-24b028f4f9aa 11 Aug 2026 H1 U1 MIT Yes Details →
v0.43.4-0.20260811180155-24b028f4f9aa 11 Aug 2026 H1 U1 MIT Yes Details →
v0.0.0-20260806152116-b5ff11f9dc3b 06 Aug 2026 H1 U1 MIT Yes Details →
v0.43.4-0.20260806152116-b5ff11f9dc3b 06 Aug 2026 H1 U1 MIT Yes Details →
v0.0.0-20260723153127-2bd20fe83dd0 23 Jul 2026 H1 U1 MIT Yes Details →
v0.43.4-0.20260723153127-2bd20fe83dd0 23 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260720145421-f07b4a0e69cc 20 Jul 2026 H1 U1 MIT Yes Details →
v0.43.4-0.20260720145421-f07b4a0e69cc 20 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260716161132-8b5d526aef12 16 Jul 2026 H1 U1 MIT Yes Details →
v0.43.2 16 Jul 2026 H1 U1 MIT Yes Details →
v0.43.3 16 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260715172556-87e89eab630e 15 Jul 2026 H1 U1 MIT Yes Details →
v0.43.2-0.20260715172556-87e89eab630e 15 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260709152754-6ce7ff38e75e 09 Jul 2026 H1 U1 MIT Yes Details →
v0.43.2-0.20260709152754-6ce7ff38e75e 09 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260706211057-dfadd36849d0 06 Jul 2026 H1 U1 MIT Yes Details →
v0.43.2-0.20260706211057-dfadd36849d0 06 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260630180429-e8c9bababc01 30 Jun 2026 H1 U1 MIT Yes Details →
v0.43.2-0.20260630180429-e8c9bababc01 30 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260625182601-8f422b601a28 25 Jun 2026 H1 U1 MIT Yes Details →
v0.43.1 25 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260622201340-4833d8c3024e 22 Jun 2026 H1 U1 MIT Yes Details →
v0.43.0 22 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260618221856-288dfe92725c 18 Jun 2026 H1 U1 MIT Yes Details →
v0.42.4-0.20260618221856-288dfe92725c 18 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260618160146-c135a708c7a2 18 Jun 2026 H1 U1 MIT Yes Details →
v0.42.4-0.20260618160146-c135a708c7a2 18 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260617225350-f46f70dade11 17 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260612174449-dcc315417302 12 Jun 2026 H1 U1 MIT Yes Details →
v0.42.3 12 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260605185219-c6017195f2ba 05 Jun 2026 H1 U1 MIT Yes Details →
v0.42.3-0.20260605185219-c6017195f2ba 05 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260527212853-439b2200d9e2 27 May 2026 H1 U1 MIT Yes Details →
v0.42.2 27 May 2026 H1 U1 MIT Yes Details →
v0.0.0-20260505154520-b46ac896505d 05 May 2026 H1 U1 MIT Yes Details →
v0.42.1 05 May 2026 H1 U1 MIT Yes Details →
v0.0.0-20260504195418-aa4728607bd5 04 May 2026 H1 U1 MIT Yes Details →
v0.42.1-0.20260504195418-aa4728607bd5 04 May 2026 H1 U1 MIT Yes Details →
v0.0.0-20260429223608-f9494d4d092a 29 Apr 2026 H1 U1 MIT Yes Details →
v0.42.0 29 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260420202320-ba272857cc23 20 Apr 2026 H1 U1 MIT Yes Details →
v0.41.1-0.20260420202320-ba272857cc23 20 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260413173201-b25f9a35790c 13 Apr 2026 H1 U1 MIT Yes Details →
v0.41.1-0.20260413173201-b25f9a35790c 13 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260409194759-c19523442b50 09 Apr 2026 H1 U1 MIT Yes Details →
v0.40.4 09 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260408130521-1023c47dd4a7 08 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260406081019-a84b67520129 06 Apr 2026 H1 U1 MIT Yes Details →
v0.41.1-0.20260406081019-a84b67520129 06 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260402193520-88f82d17e9e5 02 Apr 2026 H1 U1 MIT Yes Details →
v0.41.1-0.20260402193520-88f82d17e9e5 02 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260401210432-2c7263f72a37 01 Apr 2026 H1 U1 MIT Yes Details →
v0.41.1-0.20260401210432-2c7263f72a37 01 Apr 2026 H1 U1 MIT Yes Details →
v0.0.0-20260324183644-ad27e4f4e6bd 24 Mar 2026 H1 U1 MIT Yes Details →
v0.41.1-0.20260324183644-ad27e4f4e6bd 24 Mar 2026 H1 U1 MIT Yes Details →
v0.0.0-20260320164435-c72db92687c1 20 Mar 2026 H1 U1 MIT Yes Details →
v0.40.3 20 Mar 2026 H1 U1 MIT Yes Details →
v0.0.0-20260319235901-0c2273256543 19 Mar 2026 H1 U1 MIT Yes Details →
v0.41.1-0.20260319235901-0c2273256543 19 Mar 2026 H1 U1 MIT Yes Details →
v0.0.0-20260318150216-5a6e192a0399 18 Mar 2026 H1 U1 MIT Yes Details →
v0.41.0 18 Mar 2026 H1 U1 MIT Yes Details →
v0.0.0-20260316185943-64e5b0fba905 16 Mar 2026 H1 U1 MIT Yes Details →
v0.0.0-20260313172759-d0624ca011d3 13 Mar 2026 H1 U1 MIT Yes Details →
v0.40.3-0.20260313172759-d0624ca011d3 13 Mar 2026 H1 U1 MIT Yes Details →
v0.0.0-20260305182148-66b6a12d8a89 05 Mar 2026 H1 U1 MIT Yes Details →
v0.40.3-0.20260305182148-66b6a12d8a89 05 Mar 2026 H1 U1 MIT Yes Details →
v0.0.0-20260227145534-78b603e2d659 27 Feb 2026 H1 U1 MIT Yes Details →
v0.40.2 27 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260226233529-c577d49d05f1 26 Feb 2026 H1 U1 MIT Yes Details →
v0.40.2-0.20260226233529-c577d49d05f1 26 Feb 2026 H1 U1 MIT Yes Details →
v0.40.1 26 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260223161017-fdb82a067e3f 23 Feb 2026 H1 U1 MIT Yes Details →
v0.40.1-0.20260223161017-fdb82a067e3f 23 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260219171035-f6db572b2865 19 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260219045848-0ca44f41be06 19 Feb 2026 H1 U1 MIT Yes Details →
v0.40.1-0.20260219045848-0ca44f41be06 19 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260218213320-031d597d3443 18 Feb 2026 H1 U1 MIT Yes Details →
v0.40.0 18 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260213235519-7ecec65940ff 13 Feb 2026 H1 U1 MIT Yes Details →
v0.39.3 13 Feb 2026 H1 U1 MIT Yes Details →
v0.39.2 13 Feb 2026 H1 U1 MIT Yes Details →
v0.39.1 13 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260212201904-ea3853112131 12 Feb 2026 H1 U1 MIT Yes Details →
v0.39.1-0.20260212201904-ea3853112131 12 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260210205107-d4000bd3986c 10 Feb 2026 H1 U1 MIT Yes Details →
v0.39.1-0.20260210205107-d4000bd3986c 10 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260204194213-26b8a878f57f 04 Feb 2026 H1 U1 MIT Yes Details →
v0.39.1-0.20260204194213-26b8a878f57f 04 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260204023542-1b8ff5774ce6 04 Feb 2026 H1 U1 MIT Yes Details →
v0.39.0 04 Feb 2026 H1 U1 MIT Yes Details →
v0.38.1-0.20260203231424-c741736444ca 03 Feb 2026 H1 U1 MIT Yes Details →
v0.0.0-20260203101009-574983839fa5 03 Feb 2026 H1 U1 MIT Yes Details →
v0.38.1-0.20260203101009-574983839fa5 03 Feb 2026 H1 U1 — Yes Details →
v0.38.1-0.20260203050426-e4e4d90a035f 03 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260130164136-82653f1b7ead 30 Jan 2026 H1 U1 — Yes Details →
v0.38.0 30 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260122163921-cc7998a51493 22 Jan 2026 H1 U1 — Yes Details →
v0.37.0 22 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260121175739-f7c247453010 21 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260120225323-f01926fd5567 20 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260116213757-6c7ffeea484e 16 Jan 2026 H1 U1 — Yes Details →
v0.35.1-0.20260116213757-6c7ffeea484e 16 Jan 2026 H1 U1 — Yes Details →
v0.36.0 16 Jan 2026 H1 U1 — Yes Details →
v0.35.0 09 Jan 2026 H1 U1 — Yes Details →
v0.34.0-secrets-engine-injection 06 Jan 2026 H1 U1 — Yes Details →
v0.34.1-0.20260105211624-16a778f42e9f 05 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20251216224206-ebf06304beb8 16 Dec 2025 H1 U1 — Yes Details →
v0.34.1-0.20251216224206-ebf06304beb8 16 Dec 2025 H1 U1 — Yes Details →
v0.0.0-20251212183138-f4162ef9ba97 12 Dec 2025 H1 U1 — Yes Details →
v0.34.0 12 Dec 2025 H1 U1 — Yes Details →
v0.33.0 11 Dec 2025 H1 U1 — Yes Details →
v0.32.0 08 Dec 2025 H1 U1 — Yes Details →

The newest 120 of 196 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 2
  • 2026 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 4 of the 4 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/docker/mcp-gateway

The 4 most severe of 4 vulnerabilities recorded for this package

Search all 4 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2026-55887: Docker MCP Gateway Arbitrary Argument Injection via OCI Image Label 8.7 high 0.42.2 18 Jun 2026
CVE-2025-64443: Docker MCP Gateway DNS Rebinding Vulnerability in Streaming Mode 7.3 high 0.28.0 03 Dec 2025
CVE-2025-64443: DNS Rebinding Vulnerability in Docker MCP Plugin and Gateway N/A unrated 0.28.0 08 Dec 2025
CVE-2026-55887: Docker MCP Gateway Argument Injection Vulnerability N/A unrated 0.42.2 25 Jun 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/docker/mcp-gateway

Is github.com/docker/mcp-gateway safe to use?

Vulert records 4 vulnerabilities for github.com/docker/mcp-gateway in Go: 0 critical, 2 high, 0 medium and 0 low, plus 2 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/docker/mcp-gateway's Vulert package health score?

Vulert scores github.com/docker/mcp-gateway 77/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/docker/mcp-gateway affected?

Yes. v0.44.2, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/docker/mcp-gateway have?

4 vulnerabilities are recorded for github.com/docker/mcp-gateway in the Go ecosystem: 0 critical, 2 high, 0 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/docker/mcp-gateway vulnerabilities disclosed?

4 vulnerabilities were recorded for github.com/docker/mcp-gateway in the last 12 months, and the oldest entry in this database dates to 03 Dec 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/docker/mcp-gateway are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/docker/mcp-gateway for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/docker/mcp-gateway version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.