imjasonh/rustvulncheck
1
0
Fork 0
mirror of https://github.com/imjasonh/rustvulncheck synced 2026-07-06 19:02:25 +00:00
Code Activity

chore: enrich vuln db (710 entries, 142 with symbols)

Browse source
This commit is contained in:
github-actions[bot] 2026-06-29 12:59:24 +00:00
parent 849a9acbd8
commit 4c4bb3889a
1 changed files with 73 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

74
vuln_db.json
View file

@ -1,5 +1,5 @@
{
"generated_at": "unix:1782468928",
"generated_at": "unix:1782737964",
"entries": [
{
"advisory_id": "RUSTSEC-0000-0000",
@ -13525,6 +13525,78 @@
"change_type": "Modified"
}
]
},
{
"advisory_id": "RUSTSEC-2026-0189",
"package": "rmcp",
"title": "DNS rebinding vulnerability in rmcp Streamable HTTP server transport",
"date": "2026-04-29",
"patched_versions": [
">= 1.4.0"
],
"commit_sha": "8e22aa2de28df5a285eed87c11cd89bf15fa90d3",
"vulnerable_symbols": [
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::StreamableHttpServerConfig::default",
"change_type": "Modified"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::StreamableHttpServerConfig::disable_allowed_hosts",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::StreamableHttpServerConfig::with_allowed_hosts",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::StreamableHttpService::handle",
"change_type": "Modified"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::bad_request_response",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::forbidden_response",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::host_is_allowed",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::normalize_authority",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::normalize_host",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::parse_allowed_authority",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::parse_host_header",
"change_type": "Added"
},
{
"file": "crates/rmcp/src/transport/streamable_http_server/tower.rs",
"function": "rmcp::transport::streamable_http_server::tower::validate_dns_rebinding_headers",
"change_type": "Added"
}
]
}
]
}