Product by Ondata

    Ckan-mcp-server

    7 known vulnerabilities in Ckan-mcp-server (Ondata), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ckan-mcp-server (Ondata)
    MediumCVE-2026-61612

    @aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509

    		5.7
    MediumCVE-2026-53509

    Ondata Ckan-mcp-server: Server-Side Request Forgery (SSRF)

    		5.7
    MediumCVE-2026-73845

    CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

    		5.3
    MediumCVE-2026-73846

    CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

    		6.5
    LowCVE-2026-73844

    CKAN MCP Server: Information disclosure via verbose error reflection

    		3.7
    LowCVE-2026-76894

    Ondata Ckan-mcp-server: Improper Verification of Source of a Communication Channel

    		3.1
    MediumCVE-2026-33060

    CKAN MCP Server: SSRF via base_url allows access to internal networks

    		5.3

    All products by Ondata