MCP Registry has open redirect via protocol-relative path in trailing-slash middleware
Moderate severity
GitHub Reviewed
Published
May 4, 2026
in
modelcontextprotocol/registry
•
Updated May 15, 2026
Give feedback on Dependabot alerts