CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action

Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

rmcp Streamable HTTP server transport has a DNS rebinding vulnerability

dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport

OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding

copilot-api has Reliance on Reverse DNS Resolution for a Security-Critical Action

OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration

Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Coder AgentAPI exposed user chat history via a DNS rebinding attack

vet MCP Server SSE Transport DNS Rebinding Vulnerability

Ollama DNS rebinding vulnerability

Websites were able to send any requests to the development server and read the response in vite

MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding

Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes

RubyGems vulnerable to DNS hijack attack

RubyGems has Origin Validation Error vulnerability

Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements