Repository navigation

Findings-catalogue fixes (authz, auth, gateway, SSRF, events) - #3

Merged

Harshith029 merged 6 commits into

mainfrom

catalogue-split

Oct 18, 2026

Merged

Findings-catalogue fixes (authz, auth, gateway, SSRF, events)#3
Harshith029 merged 6 commits into
mainfrom
catalogue-split

Commits on Oct 17, 2026
- style: ruff format the files the catalogue fixes touch
  
  Harshith029
  and
  claude
  committed
  67fddee
- fix: findings-catalogue fixes (authz, auth, gateway, SSRF, events, demo)
  
  Harshith029
  and
  claude
  committed
  3a79210
- test(gateway): expect the in-protocol capacity refusal, not HTTP 503
  
  Harshith029
  and
  claude
  committed
  8111206
- fix(authz,downstream): keep derived-field comparands; make the downstream deadline configurable
  
  Harshith029
  and
  claude
  committed
  81fd4dd
- security(deps): upgrade mcp to 1.30.0 for CVE-2026-59951
  
  Harshith029
  and
  claude
  committed
  1ff9e13
- test(downstream): follow mcp 1.30.0's own redirect policy; test cross-origin refusal over TCP
  
  Harshith029
  and
  claude
  committed
  3130838