copilot-api@0.5.10
Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code!
latest version
0.7.0
first published
1 years ago
latest version published
7 months ago
Direct Vulnerabilities
Known vulnerabilities in the copilot-api package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
copilot-api is a Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code! Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains via the How to fix Permissive Cross-domain Policy with Untrusted Domains? There is no fixed version for | * |
copilot-api is a Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code! Affected versions of this package are vulnerable to DNS Rebinding in ericc-ch copilot-api up to 0.7.0. This impacts an unknown function of the file /token of the component Header Handler. Executing a manipulation of the argument Host can lead to reliance on reverse dns resolution. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. How to fix DNS Rebinding? There is no fixed version for | * |