- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 1 critical, 2 high, 1 medium
- Registry
- pkg.go.dev
Advisories 4
- CVE-2026-101084Critical 9.3
obot before v0.21.1 Authorization Bypass via /mcp-connect
Affected: fixed in 0.21.1.
- CVE-2026-101064High 8.3
Obot before v0.23.0 Server-Side Request Forgery via MCP
Affected: fixed in 0.23.0.
- CVE-2026-101063Medium 6.9
Obot before v0.23.0 Authentication Bypass via Registry API
Affected: fixed in 0.23.0.
- CVE-2026-101062High 8.7
Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
Affected: fixed in 0.23.0.