vet MCP Server SSE Transport DNS Rebinding Vulnerability
Priority LOW 11CWE-350Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.
Summary
vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE mode with default ports through the sqlite3 query MCP tool. This issue is fixed in version 1.12.5.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00407 35th percentileScored 2026-11-07
Fix Fixed vet (safedep): 1.12.5github.com/safedep/vet (Go): 1.12.5
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| safedep | vet | before 1.12.5 | 1.12.5 | Patch available | CNA |
| — | github.com/safedep/vet (Go) | before 1.12.5 | 1.12.5 | Patch available | GHSA-6q9c-m9fr-865m |
- vet Vendorsafedep Affected before 1.12.5 Fixed in 1.12.5 Patch available CNA
- github.com/safedep/vet (Go) Vendor— Affected before 1.12.5 Fixed in 1.12.5 Patch available GHSA-6q9c-m9fr-865m
Remediation
- Fix · CNA vet (safedep) Fixed in 1.12.5
- Fix · GHSA-6q9c-m9fr-865m github.com/safedep/vet (Go) Fixed in 1.12.5 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2025-59163
- 2026-10-03 Alias added: GHSA-6q9c-m9fr-865m
References
More safedep vulnerabilities
- TI-2026-32897 Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content CVSS 3.1MEDIUM 5.5
Sources
- CVE-2025-59163 · CVE Program
- CVE-2025-59163 · NVD
- FIRST EPSS
- GHSA-6q9c-m9fr-865m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences