{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.0"}],"component":"@executeautomation/database-server","cve_ids":["CVE-2025-59333"],"ecosystem":"npm","epss":0.00394,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-65hm-pwj5-73pw","id":"tcs_01M5KF5S6ENQQXC1QKW1ADA87B","modified_at":"2025-09-16T20:42:27.321464Z","published_at":"2025-09-16T19:31:56Z","references":["https://osv.dev/vulnerability/GHSA-65hm-pwj5-73pw","https://github.com/executeautomation/mcp-database-server/security/advisories/GHSA-65hm-pwj5-73pw","https://nvd.nist.gov/vuln/detail/CVE-2025-59333","https://github.com/executeautomation/mcp-database-server"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-65hm-pwj5-73pw","url":"https://osv.dev/vulnerability/GHSA-65hm-pwj5-73pw"}],"summary":"@executeautomation/database-server does not properly restrict access, bypassing a \"read-only\" mode"}