Skip to content
OpenAdvisories

Package · Go

github.com/f1bonacc1/process-compose

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-77339

    Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

    Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, valid…

    F1bonacc1 process-compose github.com/f1bonacc1/process-compose Go