stata-mcp

PyPI2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting stata-mcppage 1 of 1

CVE-2026-31040CRITICALCVSS 9.8EG 9.8✓ Fixed in 1.13.0
2026-04-08
vulnerable: 0.1.0 ... 1.9.1 (35 versions)
A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.
CVE-2026-47708CRITICALCVSS 0.0EG 0.0✓ Fixed in 1.17.3
2026-06-04
vulnerable: 0.1.0 ... 1.9.1 (91 versions)
MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper ### Summary The `log_file_name` parameter in the `stata_do` API and CLI is directly interpolated into a Stata command string without sanitization. The s…

Check whether stata-mcp is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for stata-mcp CVEs against the assets you own.

Start Free Scan →