DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-64443 · Microsoft / collected KEV context

EUVD-2025-200985

GHSA-46gc-mwh4-cc5r

GO-2025-4179

cve-program · CVE-2025-64443

• https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r
• https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e

euvd · EUVD-2025-200985

• https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r
• https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e

nvd · CVE-2025-64443

• https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e
• https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r

osv · GHSA-46gc-mwh4-cc5r

• https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r
• https://nvd.nist.gov/vuln/detail/CVE-2025-64443
• https://github.com/docker/mcp-gateway/pull/190
• https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e
• https://github.com/docker/mcp-gateway/commit/fe073985c8eb6e0c9317d2f198c07686f70ea06d
• https://github.com/docker/mcp-gateway
• https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#security-warning

osv · GO-2025-4179

• https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r
• https://nvd.nist.gov/vuln/detail/CVE-2025-64443
• https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e
• https://github.com/docker/mcp-gateway/commit/fe073985c8eb6e0c9317d2f198c07686f70ea06d
• https://github.com/docker/mcp-gateway/pull/190
• https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#security-warning

No related operational record is retained in the current change model.