Products: 2
Vulnerabilities: 7
Known Exploited: 0
0
Critical Level Threats
0
High Level Threats
5
Medium Level Threats
2
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-76894
CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
Last Modified: Nov 04, 2026
Published: Nov 03, 2026
CVE-2026-61612
@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509
Last Modified: Sep 21, 2026
Published: Sep 21, 2026
CVE-2026-53509
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)
Last Modified: Aug 21, 2026
Published: Aug 21, 2026
CVE-2026-73846
CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
Last Modified: Aug 17, 2026
Published: Aug 14, 2026
CVE-2026-73845
CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
Last Modified: Aug 14, 2026
Published: Aug 14, 2026
Items Per Page
