CWE-350.

SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

• sharpemu
• Authentication bypass
• Cross-site request forgery (CSRF)

AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools

• ankimcp anki-mcp-server-addon
• CWE-346
• CWE-350

Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

• CWE-346
• CWE-350

>=1.34.0, <1.107.5 || >=2.0.0b1, <2.30.0 · fixed in 1.107.5, 2.30.0

Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation

• chartbrew
• CWE-350

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

• CWE-350

<2.1.30 · fixed in 2.1.30

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

• Server-side request forgery (SSRF)
• CWE-350

<1.6.58 · fixed in 1.6.58

Grav before 3.9.2 Host Header Injection via sendInvitationEmail

• grav
• CWE-350

BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot

• bunkerity bunkerweb
• CWE-350

ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

• Race condition
• Server-side request forgery (SSRF)

<1.0.3 · fixed in 1.0.3

MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection

• CWE-346
• CWE-350

<0.23.0 · fixed in 0.23.0

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

• Race condition
• Server-side request forgery (SSRF)

<0.63.0 · fixed in 0.63.0

Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab

• GitLab
• CWE-350

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

• CWE-346
• CWE-350

<4.5.5 · fixed in 4.5.5

PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

• Authentication bypass
• CWE-350

<1.6.59 · fixed in 1.6.59

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks.

• CWE-350

Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution

• CWE-350

>=0.0.0-0, <7.7.0 · fixed in 7.7.0

DNS rebinding vulnerability in rmcp Streamable HTTP server transport

• CWE-346
• CWE-350

>=0.0.0-0, <1.4.0 · fixed in 1.4.0

copilot-api has Reliance on Reverse DNS Resolution for a Security-Critical Action

• CWE-350

<=0.7.0 · no fixed version yet

OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding

• Race condition
• Server-side request forgery (SSRF)

<2026.4.10 · fixed in 2026.4.10

OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration

• CWE-346
• CWE-350

<2026.3.31 · fixed in 2026.3.31

Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation

• CWE-346
• CWE-350

>=2.442, <2.555 · fixed in 2.555

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

• Weak cryptography or TLS
• CWE-350

>=3.8.0, <3.8.6 || >=3.9.0, <3.9.5 · fixed in 3.8.6, 3.9.5

Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)

• kiteworks security-advisories
• Server-side request forgery (SSRF)
• CWE-350

Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation

• Spam protection, Honeypot, Anti-Spam by CleanTalk
• CWE-350

Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

• CWE-350
• CWE-1188

<1.23.0 · fixed in 1.23.0

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

• CWE-350
• CWE-1188

<1.24.0 · fixed in 1.24.0

Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients.

• CWE-350

Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi

• CWE-350

<0.4.0 · fixed in 0.4.0

vet MCP Server SSE Transport DNS Rebinding Vulnerability in github.com/safedep/vet

• CWE-350

<1.12.5 · fixed in 1.12.5

DNS rebinding circumvents CORS

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-350

Websites were able to send any requests to the development server and read the response in vite

• CWE-346
• CWE-350

<4.5.6 || >=5.0.0, <5.4.12 || >=6.0.0, <6.0.9 · fixed in 4.5.6, 5.4.12, 6.0.9

GHSL-2024-091: DNS rebinding attack in home-gallery

• xemle home-gallery
• CWE-350

MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding

• Server-side request forgery (SSRF)
• CWE-350

<23.12.4.2 · fixed in 23.12.4.2

homepage DNS rebinding vulnerability (GHSL-2024-096)

• homepage
• CWE-350

IBM Cognos Controller security bypass

• IBM Cognos Controller
• CWE-350

Ollama DNS rebinding vulnerability

• Authentication bypass
• CWE-346

<0.1.29 · fixed in 0.1.29

SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a reboot) via a DNS Rebinding attack.

• CWE-350

Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes

• Authentication bypass
• CWE-350

<2.35.1 · fixed in 2.35.1

Windows DNS Spoofing Vulnerability

• Microsoft Windows Server 2019
• Microsoft Windows Server 2019 (Server Core installation)
• CWE-350

RubyGems vulnerable to DNS hijack attack

• CWE-350

>=2.0.0, <2.0.16 || >=2.2.0, <2.2.4 || >=2.4.0, <2.4.7 · fixed in 2.0.16, 2.2.4, 2.4.7

RubyGems has Origin Validation Error vulnerability

• CWE-346
• CWE-350

<2.6.13 · fixed in 2.6.13

Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding

• Authentication bypass
• CWE-350

>=6.0 · no fixed version yet

DNS Rebinding in etcd

• CWE-20
• CWE-350

<3.4.0 · fixed in 3.4.0

A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding

• Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH
• Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP
• CWE-350

Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements

• CWE-350

<2.6.3 · fixed in 2.6.3

Node: Node.js before 10.24.0, 12.21.0, 14.16.0…

• Node
• CWE-350