All vulnerabilities

CVE-2026-81095

Timescale pg-aiguide through 0.5.0: DNS rebinding via disabled Host header allow-list

mediumCVSS 7.6CWE-346

Vendor

Timescale

Package

pg-aiguide pip

Affected

<= 0.5.0

Disclosed

2026-08-27

Credit

Avishai Gonen

dns-rebindingmcphost-header

Published advisory