Cpe:2.3:a:pgedge:postgres_mcp_server:*:*:*:*:*:*:*:*

The pgEdge Postgres MCP Server prior to version 1.1.0 fails to validate the Origin header, enabling DNS rebinding attacks that allow an attacker-controlled web page to exfiltrate database schemas and query results.