tocsin

CVE-2026-47708

2 advisories.

PyPI/stata-mcp CVE-2026-47708: critical

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

Action: Upgrade stata-mcp to 1.17.3 or later.

pip install stata-mcp==1.17.3

Affected

introducedfixedlast affected
01.17.3-

Fixed versions

1.17.3

Sources

CVE-2026-47708 · published · modified · JSON

PyPI/stata-mcp CVE-2026-47708: unknown

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

Action: Upgrade stata-mcp to 1.17.3 or later.

pip install stata-mcp==1.17.3

Affected

introducedfixedlast affected
01.17.3-

Fixed versions

1.17.3

Sources

CVE-2026-47708 · published · modified · JSON