Skip to content
OpenAdvisories

Product · timescale

tiger-slack

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-81099

    Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List

    tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a reques…

    timescale tiger-slack