Skip to content
OpenAdvisories

Product · timescale

pg-aiguide

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-81095

    Timescale pg-aiguide through 0.5.0 DNS Rebinding via Disabled Host Header Allow-List

    pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request wha…

    timescale pg-aiguide