6 matches found
SUSE-SU-2026:23636-1 Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276612. - CVE-2026-81092: github.com/mark3labs/mcp-go/server: requests accepted in HTTP transports...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error through the lack CORS checks Host and Origin header validation on incoming HTTP connections. An attacker can gain unauthorized access to local or private-network servers by tricking a victim into visiting a...
EUVD-2021-34008
Malicious code in bioql PyPI...
Design/Logic Flaw
Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname...
PT-2022-11384
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns improved Host header checks. These checks are designed to reject requests that are not sent to a well-known local hostname or IP, or th...
