OSV - Open Source Vulnerabilities

CLEANSTART-2026-LO26058

CleanStart/gptscript

Security fixes for CVE-2025-15558, CVE-2026-1229, CVE-2026-25934, CVE-2026-27896, CVE-2026-33252, CVE-2026-33762, CVE-2026-34165, CVE-2026-34742, ghsa-37cx-329c-33x3, ghsa-89xv-2j6f-qhc8, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-p436-gjf2-799p, ghsa-q382-vc8q-7jhj, ghsa-q9hv-hpm4-hj6x, ghsa-wvj2-96wp-fq3f, ghsa-xw59-hvm2-8pj6 applied in versions: 0.9.7-r1, 0.9.8-r0

18 May

Fix available

MINI-95p6-8pr9-2cc7

MinimOS/datadog-agent-7
MinimOS/datadog-agent-7-core-integrations
MinimOS/datadog-agent-7-fakeintake
MinimOS/datadog-agent-7-jmx
MinimOS/datadog-agent-7-oci-compat
... 4 more

See record for full details

25 Mar

Fix available

CVE-2026-33252

github.com/modelcontextprotocol/go-sdk

MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion

23 Mar

Fix available
Severity - 7.1 (High)

GO-2026-4773

Go/github.com/modelcontextprotocol/go-sdk

Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk

23 Mar

Fix available

MINI-h24m-qh9m-m6xj

MinimOS/livekit-cli

See record for full details

22 Mar

Fix available

MINI-fvgq-795f-cq8f

MinimOS/livekit-cli-fips

See record for full details

22 Mar

Fix available

MINI-3xjf-pmwg-9r77

MinimOS/datadog-agent-fips-7
MinimOS/datadog-agent-fips-7-core-integrations
MinimOS/datadog-agent-fips-7-fakeintake
MinimOS/datadog-agent-fips-7-jmx
MinimOS/datadog-agent-fips-7-oci-compat
... 3 more

See record for full details

22 Mar

Fix available

GHSA-89xv-2j6f-qhc8

Go/github.com/modelcontextprotocol/go-sdk

Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk

19 Mar

Fix available
Severity - 7.1 (High)