{"data":{"id":"11c9c3a2-ffa7-4c97-83b2-61b435d6125b","title":"CVE-2026-6874: A vulnerability was determined in ericc-ch copilot-api up to 0.7.0. This impacts an unknown function of the file /token…","summary":"CVE-2026-6874 affects ericc-ch copilot-api up to 0.7.0. A manipulated Host argument sent to the /token endpoint of the Header Handler component can lead to reliance on reverse DNS resolution (CWE-350). The attack can be performed remotely, the exploit has been publicly disclosed, and the vendor did not respond to early contact. CVSS 4.0 base score is 5.3 (MEDIUM), assessed by VulDB; NIST has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-6874","publishedAt":"2026-04-23T00:16:47.050Z","cveId":"CVE-2026-6874","cweIds":["CWE-350"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["copilot-api@<= 0.7.0"],"affectedPackageNames":["copilot-api"],"affectedPackageRefs":["npm:copilot-api"],"affectedVendors":[],"affectedVendorsRaw":["copilot-api"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ericc-ch copilot-api reliance on reverse DNS in /token Host handling","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00257,"epssCheckedAt":"2026-11-10T00:11:23.429Z","kevDateAdded":null,"advisoryAliases":["GHSA-3vr4-cvmg-7fx4"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:20.472Z","patchAvailable":null,"disclosureDate":"2026-04-23T00:16:47.050Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[]}}