Stacklok vulnerabilities
We track 3 vulnerabilities in Stacklok products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
Latest Stacklok vulnerabilities
- 8.8 High severity
toolhive: Improper Access Control
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default network permission profile without network is
- 7.5 High severity
minder: Uncontrolled Resource Consumption
Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attac
- 7.5 High severity
Minder is a Software Supply Chain Security Platform.
Minder is a Software Supply Chain Security Platform. In version 0.0.31 and earlier, it is possible for an attacker to register a repository with a invalid or differing upstream ID, which causes Minder to report the repository as registered, but not remediate a