Skip to content
OpenAdvisories

Vendor

safedep

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 2.1

    vet MCP Server SSE Transport DNS Rebinding Vulnerability

    vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers whe…