Pgedge Pgedge-postgres-mcp vulnerabilities
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keyword6.8 Medium
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server custom tools performed writes without user confirmation3.1 Low
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server SQL injection through custom pl-do tool parameters8.8 High
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database8.1 High
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server SQL injection in the count_rows where parameter6.5 Medium
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header6.5 Medium
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebinding5.3 Medium