dns-rebinding

Records20

1. closed5.3
   MCP servers & tools CVE-2026-125320: pgEdge Postgres MCP Server vulnerable to DNS rebinding via Origin header

   Patch now · Disclosed · ●Patched · since 10 Nov 2026 · CVE-2026-125320

   AI
2. closed9.6
   obsidian-tc CVE-2026-77363: DNS-rebinding vulnerability in obsidian-tc MCP server

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-77363

   AI
3. closed5.9
   MCP servers & tools CVE-2026-77265: DNS rebinding SSRF vulnerability in MCP Atlassian server

   Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77265

   AI
4. closed9.6
   MCP servers & tools CVE-2026-61568: @zereight/mcp-gitlab lacks host allowlist protection

   Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-61568

   AI
5. closed10.0
   MCP servers & tools CVE-2026-59971: MySQL MCP Server lacks authentication and DNS protection

   Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-59971

   AI
6. closed6.5
   MCP servers & tools CVE-2026-73497: MCP Atlassian server vulnerable to SSRF via DNS rebinding

   Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-73497

   AI
7. closed7.7
   Open WebUI CVE-2026-87996: Open WebUI SSRF via DNS Rebinding in Playwright Loader

   Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87996

   AI
8. closed6.3
   Open WebUI CVE-2026-54020: Open WebUI vulnerable to DNS rebinding during URL validation

   Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-54020

   AI
9. closed6.9
   MCP SDKs CVE-2026-63118: DNS Rebinding Vulnerability in MCP Ruby SDK

   Patch now · Disclosed · since 29 Jul 2026 · CVE-2026-63118

   AI
10. closed9.4
    MCP SDKs CVE-2026-11624: Model Context Protocol lacks Origin header validation allowing DNS rebinding

    Patch now · Disclosed · since 13 Jun 2026 · CVE-2026-11624

    AI
11. closed8.8
    MCP SDKs CVE-2026-42559: RMCP Streamable HTTP Server Host Header Validation Flaw

    Patch now · Disclosed · since 14 May 2026 · CVE-2026-42559

    AI
12. closed3.1
    LangChain family LangChain langchain-openai TOCTOU DNS rebinding vulnerability

    Patch now · Disclosed · since 24 Apr 2026 · CVE-2026-41488

    AI
13. closed7.1
    Flowise CVE-2026-41272: Flowise SSRF Protection Bypass via DNS Rebinding and Default Insecure Config

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41272

    AI
14. closed8.1
    MCP servers & tools Apollo MCP Server Host Header Validation Vulnerability

    Patch now · Disclosed · since 9 Apr 2026 · CVE-2026-35577

    AI
15. closed7.6
    MCP SDKs CVE-2026-35568: DNS rebinding vulnerability in MCP Java SDK

    Patch now · Disclosed · since 7 Apr 2026 · CVE-2026-35568

    AI
16. closed8.1
    MCP SDKs CVE-2026-34742: DNS Rebinding Vulnerability in Go MCP SDK

    Patch now · Disclosed · since 2 Apr 2026 · CVE-2026-34742

    AI
17. closed7.6
    MCP SDKs CVE-2025-66416: MCP Python SDK lacks default DNS rebinding protection

    Patch now · Disclosed · since 2 Dec 2025 · updated 26 Dec 2025 · CVE-2025-66416

    AI
18. closed7.6
    MCP SDKs CVE-2025-66414: MCP TypeScript SDK lacks default DNS rebinding protection

    Patch now · Disclosed · since 2 Dec 2025 · CVE-2025-66414

    AI
19. closed6.5
    AgentAPI CVE-2025-59956: AgentAPI Client-Side DNS Rebinding Data Exfiltration Flaw

    Patch now · Disclosed · since 30 Sep 2025 · CVE-2025-59956

    AI
20. closed8.8
    Ollama Ollama DNS Rebinding Vulnerability Allows API Access

    Patch now · Disclosed · since 8 Apr 2024 · CVE-2024-28224

    AI