Critical SSRF Vulnerability in mcp-gateway-registry – Update Required

Amazon mcp-gateway-registry versions 1.0.3 through 1.34.0 contain a server-side request forgery (SSRF) flaw in the registration and update API. Authenticated attackers can exploit this to query internal network services and cloud metadata endpoints, potentially exposing sensitive data. Upgrade to version 1.35.0 or later immediately—user action is required.