Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out) | Low Risk 3.1 | 5 hours ago | 5 hours ago |
|
|
SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks | Medium Risk 5.7 | 7 months ago | 23 days ago |
|
|
@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509 | Medium Risk 5.7 | 24 days ago | 23 days ago |
|
|
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060) | Medium Risk 5.7 | 3 months ago | 23 days ago |
|
|
CKAN MCP Server: Information disclosure via verbose error reflection | Low Risk 3.7 | 1 month ago | 1 month ago |
|
|
CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
|
CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`) | Medium Risk 5.3 | 1 month ago | 1 month ago |
Page 1