{"action":"Upgrade github.com/geiserx/genieacs-mcp to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"github.com/geiserx/genieacs-mcp","cve_ids":["CVE-2026-55637"],"ecosystem":"Go","epss":0.00264,"exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-cmwv-wf9p-p8wx","id":"tcs_01M5KF7K8SRNJ1JCE5PY2HDR79","modified_at":"2026-08-26T15:26:21.228089925Z","published_at":"2026-08-25T18:05:28Z","references":["https://osv.dev/vulnerability/GHSA-cmwv-wf9p-p8wx","https://github.com/GeiserX/genieacs-mcp/security/advisories/GHSA-cmwv-wf9p-p8wx","https://github.com/GeiserX/genieacs-mcp/pull/26","https://github.com/GeiserX/genieacs-mcp/commit/577306d78190622eee97e362b042a69499ef373f","https://github.com/GeiserX/genieacs-mcp","https://github.com/GeiserX/genieacs-mcp/releases/tag/v0.3.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cmwv-wf9p-p8wx","url":"https://osv.dev/vulnerability/GHSA-cmwv-wf9p-p8wx"}],"summary":"genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport"}