TI-2026-51869 CVE-2026-73846 · GHSA-78x9-fhhx-v2g6
CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
Priority MEDIUM 62
CKAN MCP Server is a tool for querying CKAN open data portals.
ondata
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
ondata records in CISA KEVNo ondata vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-25502 CVE-2026-33060 · GHSA-3xm7-qw7j-qc8v
CKAN MCP Server: SSRF via base_url allows access to internal networks
Priority MEDIUM 59
CKAN MCP Server is a tool for querying CKAN open data portals.
TI-2026-51867 CVE-2026-73844 · GHSA-6f9w-9hf2-5rg3
CKAN MCP Server: Information disclosure via verbose error reflection
Priority MEDIUM 51
CKAN MCP Server is a tool for querying CKAN open data portals.
TI-2026-51868 CVE-2026-73845 · GHSA-83x6-42hr-jc76
CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
Priority LOW 30
CKAN MCP Server is a tool for querying CKAN open data portals.
TI-2026-44132 CVE-2026-61612 · GHSA-798p-78g2-v556
@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509
Priority LOW 26
CKAN MCP Server is a tool for querying CKAN open data portals.
TI-2026-38583 CVE-2026-53509 · GHSA-g84h-j7jj-x32p
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)
Priority LOW 26
CKAN MCP Server is a tool for querying CKAN open data portals.
Priority LOW 15
CKAN MCP Server is a tool for querying CKAN open data portals.