Prewire · case file · public copy of the record
FILE P306 PREWIRE receipts archive the live wire
CATCH #1006 DETECTED AUG 27, 2026 03:57 UTC
THE CATCHscore 5/10
EXHIBIT 1006
Aug 27, 2026 03:57 UTC github google-gemini/gemini-cli
Google Gemini CLI published a pre-release v0.59.0-nightly.20260827.g3c311beac with a fix for SSRF in MCP OAuth metadata discovery and authentication.

READY TO POST:

looks like a new gemini cli prerelease just dropped, focused on fixing an ssrf vulnerability in oauth. good to see security updates!

gemini cli got a nightly update, v0.59.0-nightly.20260827.g3c311beac, with a patch for ssrf in oauth metadata. staying secure.

EVIDENCE — the receipts
google-gemini/gemini-cli pre-release: v0.59.0-nightly.20260827.g3c311beac
name: Release v0.59.0-nightly.20260827.g3c311beac
published: 2026-08-27T02:31:17Z
url: https://github.com/google-gemini/gemini-cli/releases/tag/v0.59.0-nightly.20260827.g3c311beac

## What's Changed
* fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in https://github.com/google-gemini/gemini-cli/pull/29081


**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.59.0-nightly.20260826.g64b5b79a6...v0.59.0-nightly.20260827.g3c311beac

caught by the 20-minute sweep · the live wire · all receipts

THE WIRE RECEIPTS ACCESS @VEDOLOS TERMS PRIVACY break the story before it breaks