Skip to content
OpenAdvisories

Package · npm

copilot-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.3
    CVE-2026-6874

    ericc-ch copilot-api Header token dns rebinding

    A vulnerability was determined in ericc-ch copilot-api up to 0.7.0. This impacts an unknown function of the file /token of the component Header Handler. Executing a manipulation of the argument Host can lead to reliance on reverse dns resolution. The attack m…

    ericc-ch copilot-api copilot-api npm