Skip to content
OpenAdvisories

Product · timescale

tiger-gh-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-81100

    Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List

    tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a re…

    timescale tiger-gh-mcp-server