vet MCP Server SSE Transport DNS Rebinding Vulnerability

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-59163 · Microsoft / collected KEV context

EUVD-2025-31583

GHSA-6q9c-m9fr-865m

GO-2025-3986

cve-program · CVE-2025-59163

• https://github.com/safedep/vet/security/advisories/GHSA-6q9c-m9fr-865m
• https://github.com/safedep/vet/commit/0ae3560ba11846375812377299fe078d45cc3d48
• https://github.com/safedep/vet/releases/tag/v1.12.5

euvd · EUVD-2025-31583

• https://github.com/safedep/vet/security/advisories/GHSA-6q9c-m9fr-865m
• https://github.com/safedep/vet/commit/0ae3560ba11846375812377299fe078d45cc3d48
• https://github.com/safedep/vet/releases/tag/v1.12.5

nvd · CVE-2025-59163

• https://github.com/safedep/vet/commit/0ae3560ba11846375812377299fe078d45cc3d48
• https://github.com/safedep/vet/releases/tag/v1.12.5
• https://github.com/safedep/vet/security/advisories/GHSA-6q9c-m9fr-865m

osv · GHSA-6q9c-m9fr-865m

• https://github.com/safedep/vet/security/advisories/GHSA-6q9c-m9fr-865m
• https://nvd.nist.gov/vuln/detail/CVE-2025-59163
• https://github.com/safedep/vet/commit/0ae3560ba11846375812377299fe078d45cc3d48
• https://github.com/safedep/vet
• https://github.com/safedep/vet/releases/tag/v1.12.5
• https://pkg.go.dev/vuln/GO-2025-3986

osv · GO-2025-3986

• https://github.com/safedep/vet/security/advisories/GHSA-6q9c-m9fr-865m
• https://nvd.nist.gov/vuln/detail/CVE-2025-59163
• https://github.com/safedep/vet/commit/0ae3560ba11846375812377299fe078d45cc3d48
• https://github.com/safedep/vet/releases/tag/v1.12.5

No related operational record is retained in the current change model.