@aborruso/ckan-mcp-server
npm6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting @aborruso/ckan-mcp-serverpage 1 of 1
- CVE-2026-33060MEDIUMCVSS 5.7EG 5.7fixed in 0.4.852026-03-20
CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckan_package_search and sparql_query that accept a base_url parameter, making HTTP requests to arbitrary endpoints without rest…
- CVE-2026-53509MEDIUMCVSS 5.7EG 5.7fixed in 0.4.1062026-07-07
CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arb…
- CVE-2026-61612MEDIUMCVSS 5.7EG 5.7fixed in 0.4.1082026-09-21
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended for CVE-2026-53509) validates only the hostname string and never resolves DNS. …
- CVE-2026-73844LOWCVSS 3.7EG 3.7fixed in 0.4.1122026-08-14
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server i…
- CVE-2026-73845MEDIUMCVSS 5.3EG 5.3fixed in 0.4.1122026-08-14
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use isValidMqaServer to validate the server_url parameter with a prefi…
- CVE-2026-73846MEDIUMCVSS 6.5EG 6.5fixed in 0.4.1122026-08-14
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different …
Check whether @aborruso/ckan-mcp-server is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for @aborruso/ckan-mcp-server CVEs against the assets you own.
Book a Demo →