@aborruso/ckan-mcp-server
npm5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting @aborruso/ckan-mcp-serverpage 1 of 1
- CVE-2026-33060MEDIUMCVSS 5.7EG 5.7✓ Fixed in 0.4.852026-03-20
CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckan_package_search and sparql_query that accept a base_url parameter, making HTTP requests to arbitrary endpoints without rest…
- CVE-2026-53509MEDIUMCVSS 5.7EG 5.7✓ Fixed in 0.4.1062026-07-07
CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arb…
- CVE-2026-73844LOWCVSS 3.7EG 3.7✓ Fixed in 0.4.1122026-08-14
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server i…
- CVE-2026-73845MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.4.1122026-08-14
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use isValidMqaServer to validate the server_url parameter with a prefi…
- CVE-2026-73846MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.4.1122026-08-14
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different …
Check whether @aborruso/ckan-mcp-server is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for @aborruso/ckan-mcp-server CVEs against the assets you own.
Start Free Scan →