toolhive
toolhive 0.43.0 · pkgs/by-name/to/toolhive/package.nix
Health
Risk
risk 43 high
- +35 2 open advisories
- +8 NIXPKGS-2026-2677 has a public exploit (CISA)
Version
0.43.0 no newer release known to repology
Channels
Hydra
succeeded 2w ago
Advisories
NIXPKGS-2026-2677 high 8.8 public exploit EPSS 0.4% ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement · #564882
CVE-2026-58197
NIXPKGS-2026-2601 medium 4.7 public exploit EPSS 0.4% ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) · #563860
CVE-2026-58196
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 1
toolhive: 0.43.0 -> 0.46.0
#555923 by r-ryantm · opened 7w ago · checks pass
Closed or merged in the synced window 1
toolhive: 0.34.0 -> 0.43.0
#543289 by r-ryantm · merged 8w ago
Issues 2
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement 1.severity: security
#564882 by nixpkgs-security-tracker · opened 3w ago · 0 comments
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) 1.severity: security
#563860 by nixpkgs-security-tracker · opened 4w ago · 0 comments