All vulnerabilities

CVE-2026-NONE · GHSA-9cvx-7x8q-3g6m

prism-coder: missing Host/Origin validation on the Mind Palace dashboard allows DNS rebinding to read and export all session memory

moderateCVSS 6.0CWE-346

Vendor

dcostenco

Package

prism-mcp-server npm

Affected

<= 20.14.0

Fixed in

20.15.0

Disclosed

2026-08-24

Credit

Avishai Gonen

dns-rebindingmcp

Published advisory