{"id":"GO-2026-6525","revision":"e1a80a9a1fa34f21aa7ff3f166bb9178","records":[{"revision":"e1a80a9a1fa34f21aa7ff3f166bb9178","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6525","aliases":["CVE-2026-101063","GHSA-pr6h-vr44-xq8j"],"title":"Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot","description":"Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot","state":0,"publishedAt":"2026-09-28T16:43:40+00:00","modifiedAt":"2026-09-28T17:10:43.0706116+00:00","affected":[{"ecosystem":"Go","name":"github.com/obot-platform/obot","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.23.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/obot-platform/obot/security/advisories/GHSA-pr6h-vr44-xq8j","https://github.com/obot-platform/obot/releases/tag/v0.23.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6525","license":"OSV · upstream source license applies","key":"osv:GO-2026-6525","identifiers":["GO-2026-6525","CVE-2026-101063","GHSA-pr6h-vr44-xq8j"]},"retained":false,"historicalAffected":[]}],"coverage":[]}