Approved changes feed: RSS · Atom

cpe:2.3:a:lfprojects:agentgateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLfprojects (4544abc5-133d-544b-9bd5-895c4c487a16)
ProductAgentgateway (a6aa0251-c1eb-5a23-8325-bd902fa022e4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-29791 vulnerable 2026-06-03 15:19:23.165624 Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion
MEDIUM (4.9)
Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.
Published: 2026-03-06T20:39:40.852Z
Updated: 2026-03-09T20:54:30.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.