Skip to content
OpenAdvisories

Package · Go

github.com/safedep/vet

1 known vulnerabilities.

1 result · Feed

  • Low 2.1

    vet MCP Server SSE Transport DNS Rebinding Vulnerability

    vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers whe…