fix: prevent DNS-rebinding TOCTOU in safeProxyFetch by pinning resolved IPs - #1732

Merged

cliffhall merged 5 commits into

modelcontextprotocol:v1/mainfrom

manjunathbhaskar:fix/dns-rebinding-toctou-safeproxyfetch

Aug 20, 2026

Commits on Jul 21, 2026

fix: prevent DNS-rebinding TOCTOU in safeProxyFetch by pinning resolved IPs
manjunathbhaskar
committed
9140789

Commits on Aug 19, 2026

fix(server): make the pinned lookup honor Node's all:true callback shape
cliffhall
committed
0e1bc1d
fix(server): pin all validated addresses; keep tests out of the build
cliffhall
committed
923c58e

Commits on Aug 20, 2026