io.github.timescale/pg-aiguide
Comprehensive PostgreSQL documentation and best practices, including ecosystem tools
0.6.1version the registry lists (7 published)
1reported issue
Nolisted version affected
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.timescale/pg-aiguide
· Source code
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| CVE-2026-81095pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a r… | high | Not checked | Aug 27, 2026 |
Versions in the registry
0.6.1 (listed), 0.5.1, 0.5.0, 0.4.0, 0.3.1, 0.2.4, 0.2.3