Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-fvh2-gm75-j4j7dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transportAlso filed as CVE-2026-42559, GHSA-89vp-x53w-74fx, RUSTSEC-2026-0140, RUSTSEC-2026-0189 high Not flagged May 18, 2026

Versions in the registry

1.6.0 (listed), 1.5.0, 1.4.0, 1.3.0, 1.2.1, 1.2.0, 1.1.0, 1.0.0, 0.13.0, 0.12.0, 0.11.4, 0.11.3, 0.11.2