Skip to content
Threat Feed
Subscribe

Vendor

PgEdge

2 briefs RSS
medium advisory

pgEdge Postgres MCP Server: DNS rebinding via Origin header validation flaw (CVE-2026-125320)

The pgEdge Postgres MCP Server prior to version 1.1.0 fails to validate the Origin header, enabling DNS rebinding attacks that allow an attacker-controlled web page to exfiltrate database schemas and query results.

pgEdge Postgres MCP Server
2t 1c
medium advisory

pgEdge Postgres MCP Server: Login rate limiting bypass (CVE-2026-125321)

pgEdge Postgres MCP Server versions prior to 1.1.0 contain a vulnerability where an attacker can bypass login rate limiting by manipulating the X-Forwarded-For HTTP header.

Postgres MCP Server
1t 1c