Security: ondata/ckan-mcp-server
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Unauthenticated remote SSRF to cloud metadata → IAM credential theftGHSA-vmrr-v4xp-42cx published
Jul 9, 2026 by aborrusoCritical -
SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509GHSA-798p-78g2-v556 published
Jun 22, 2026 by aborrusoModerate -
Potential fix bypass of CVE-2026-33060GHSA-g84h-j7jj-x32p published
May 31, 2026 by aborrusoModerate -
SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networksGHSA-3xm7-qw7j-qc8v published
Mar 16, 2026 by aborrusoModerate