VYPR

Tiger Gh Mcp Server

by Timescale

CVEs (1)

  • CVE-2026-81100MedAug 27, 2026
    risk 0.37cvss 6.8epss

    tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host…