{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.0"}],"component":"sqlite-mcp","cve_ids":["CVE-2026-7206"],"ecosystem":"PyPI","epss":0.00435,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4j28-22qp-rjcf","id":"tcs_01M5KEYCDHTFVZ785SBC718X7X","modified_at":"2026-07-13T16:43:12.711282774Z","published_at":"2026-04-28T03:31:29Z","references":["https://osv.dev/vulnerability/GHSA-4j28-22qp-rjcf","https://nvd.nist.gov/vuln/detail/CVE-2026-7206","https://github.com/dubydu/sqlite-mcp/issues/1","https://github.com/dubydu/sqlite-mcp/pull/2","https://github.com/dubydu/sqlite-mcp/commit/a5580cb992f4f6c308c9ffe6442b2e76709db548","https://github.com/dubydu/sqlite-mcp","https://vuldb.com/submit/802081","https://vuldb.com/vuln/359806","https://vuldb.com/vuln/359806/cti"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-4j28-22qp-rjcf","url":"https://osv.dev/vulnerability/GHSA-4j28-22qp-rjcf"}],"summary":"sqlite-mcp has an Injection issue"}