🚨 Security: Critical or high vulnerabilities in mcp-server-time container #1042
Description
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
- Image:
ghcr.io/stacklok/dockyard/uvx/mcp-server-time:2026.8.18 - Critical vulnerabilities: 1
- High vulnerabilities: 5
Details
See the Security tab for full details.
Critical Vulnerabilities
- GHSA-ffc3-869f-jxw9 in
pyjwt@2.13.0: PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
High Vulnerabilities
- GHSA-r6x4-923q-g947 in
pyjwt@2.13.0: PyJWT BOM Bypass - GHSA-w2cx-738m-mc7w in
pyjwt@2.13.0: PyJWT accepts public JWK containers as HMAC secrets - GHSA-9j54-fg26-wv3r in
pyjwt@2.13.0: PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation - GHSA-p4g4-x82p-q773 in
pyjwt@2.13.0: PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard - GHSA-9v7f-9g4p-ffgj in
pyjwt@2.13.0: PyJWT: PyJWKClient follows redirects when fetching JWKS
Automated security scan from periodic-security-scan workflow
Activity
cc-bb-aa commentedon Oct 5, 2026
Fixing the image is the priority. For anything running in production we also gate MCP tool calls so a vulnerable container cannot call tools outside an explicit allowlist, and we keep receipts for every call. It is a useful second layer for servers like this. Docs with a sample policy are here: https://shield-agent.com/docs
github-actions commentedon Oct 12, 2026
Updated Scan Results
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
ghcr.io/stacklok/dockyard/uvx/mcp-server-time:2026.8.18Details
See the Security tab for full details.
Critical Vulnerabilities
pyjwt@2.13.0: PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guardHigh Vulnerabilities
pyjwt@2.13.0: PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validationpyjwt@2.13.0: PyJWT BOM Bypasspyjwt@2.13.0: PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guardpyjwt@2.13.0: PyJWT accepts public JWK containers as HMAC secretspyjwt@2.13.0: PyJWT: PyJWKClient follows redirects when fetching JWKSAutomated security scan from periodic-security-scan workflow
github-actions commentedon Oct 19, 2026
The periodic scan of
ghcr.io/stacklok/dockyard/uvx/mcp-server-time:2026.10.10found no fixable critical or high vulnerabilities, so this issue is being closed. It will be reopened as a new issue if findings return.