CVE-2026-53509
1 advisory.
npm/@aborruso/ckan-mcp-server CVE-2026-53509: medium 5.7, EPSS 0.38%
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)
Action: Upgrade @aborruso/ckan-mcp-server to 0.4.106 or later.
npm i @aborruso/ckan-mcp-server@0.4.106Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.106 | - |
Fixed versions
| 0.4.106 |
Sources
- osv: GHSA-g84h-j7jj-x32p
- https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p
- https://github.com/advisories/GHSA-3xm7-qw7j-qc8v
- https://github.com/ondata/ckan-mcp-server
- https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106
CVE-2026-53509 · published · modified · JSON