Ondata Ckan-mcp-server vulnerabilities
- ondata ckan-mcp-serverCKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)3.1 Low
- ondata ckan-mcp-server@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-535095.7 Medium
- ondata ckan-mcp-serverCKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning6.5 Medium
- ondata ckan-mcp-serverCKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)5.3 Medium
- ondata ckan-mcp-serverCKAN MCP Server: Information disclosure via verbose error reflection3.7 Low
- ondata ckan-mcp-server@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)5.7 Medium
- ondata ckan mcp server, ckan-mcp-server +1 moreCKAN MCP Server: SSRF via base_url allows access to internal networks5.3 Medium