What’s Vulnerable › Products

ondata ckan-mcp-server vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your ondata ckan-mcp-server version is affected

Latest ondata ckan-mcp-server vulnerabilities

• CVE-2026-61612 — @aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509 (CVSS 5.7)
• CVE-2026-53509 — @aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060) (CVSS 5.7)
• CVE-2026-73846 — CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning (CVSS 6.5)
• CVE-2026-73845 — CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`) (CVSS 5.3)
• CVE-2026-73844 — CKAN MCP Server: Information disclosure via verbose error reflection (CVSS 3.7)
• CVE-2026-33060 — CKAN MCP Server: SSRF via base_url allows access to internal networks (CVSS 5.7)