Ondata vulnerabilities

Products

• Ckan-mcp-server 7

Newest

• ondata ckan-mcp-server CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out) CVE-2026-76894 Fix available 3.1 LowOctober 16, 2026
• ondata ckan-mcp-server @aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509 CVE-2026-61612 Fix available 5.7 MediumSeptember 21, 2026
• ondata ckan-mcp-server CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning CVE-2026-73846 Fix available 6.5 MediumAugust 14, 2026
• ondata ckan-mcp-server CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`) CVE-2026-73845 Fix available 5.3 MediumAugust 14, 2026
• ondata ckan-mcp-server CKAN MCP Server: Information disclosure via verbose error reflection CVE-2026-73844 Fix available 3.7 LowAugust 14, 2026
• ondata ckan-mcp-server @aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060) CVE-2026-53509 Fix available 5.7 MediumJuly 7, 2026
• ondata ckan mcp server, ckan-mcp-server +1 more CKAN MCP Server: SSRF via base_url allows access to internal networks CVE-2026-33060 Fix available 5.3 MediumMarch 18, 2026