@aborruso/ckan-mcp-server vulnerabilities (npm)
7 vulnerabilities.
-
@aborruso/ckan-mcp-servernpm CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out) 3.1 Low -
@aborruso/ckan-mcp-servernpm @aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509 5.7 Medium -
@aborruso/ckan-mcp-servernpm CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning 6.5 Medium -
@aborruso/ckan-mcp-servernpm CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`) 5.3 Medium -
@aborruso/ckan-mcp-servernpm CKAN MCP Server: Information disclosure via verbose error reflection 3.7 Low -
@aborruso/ckan-mcp-servernpm @aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060) 5.7 Medium -
@aborruso/ckan-mcp-servernpm CKAN MCP Server: SSRF via base_url allows access to internal networks 5.3 Medium