Security: ondata/ckan-mcp-server
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
SSRF guard bypass: isBlockedIp misses NAT64/6to4/IPv4-compatible IPv6 ranges (CVE-2026-61612 chain incomplete)GHSA-x32r-mh7g-q2rf published
Aug 20, 2026 by aborrusoModerate -
DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)GHSA-vqff-r82h-9crc published
Jul 9, 2026 by aborrusoLow -
Cache-key canonicalization collision enables cache confusion / poisoningGHSA-78x9-fhhx-v2g6 published
Jul 9, 2026 by aborrusoModerate -
Information disclosure via verbose error reflectionGHSA-6f9w-9hf2-5rg3 published
Jul 9, 2026 by aborrusoLow -
Unsanitized portal-controlled fields are emitted verbatim in tool output (injection)GHSA-c499-9f77-93m8 published
Jul 9, 2026 by aborrusoModerate -
Second-order SSRF: outbound request destination derived from attacker-controlled dataset metadata in ckan_list_resourcesGHSA-3369-fmrv-vh4j published
Jul 9, 2026 by aborrusoModerate -
Denial of service via unbounded response buffering and synchronous decompression ("decompression bomb")GHSA-q5gv-wppg-53fv published
Jul 9, 2026 by aborrusoHigh -
MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)GHSA-83x6-42hr-jc76 published
Jul 9, 2026 by aborrusoModerate -
HTTP transport does not validate Origin/Host on /mcp (DNS rebinding)GHSA-v3j5-c4v8-4pjr published
Jul 9, 2026 by aborrusoModerate -
# Server-Side Request Forgery (SSRF) in `sparql_query` / fetch-based request paths via unvalidated redirects and DNS rebindingGHSA-38f8-m897-jm7w published
Jul 9, 2026 by aborrusoHigh