stata-mcp vulnerabilities (PyPI)
3 vulnerabilities.
-
stata-mcpPyPI MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install` 8.4 High -
stata-mcpPyPI MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper 9.3 Critical -
stata-mcpPyPI stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution 9.8 Critical