{"action":"Upgrade mysql-mcp-server to 0.3.0 or later.","affected":[{"fixed":"0.3.0","introduced":"0"}],"component":"mysql-mcp-server","cve_ids":["CVE-2026-11529"],"ecosystem":"PyPI","epss":0.00205,"exploited":false,"fixed_versions":["0.3.0"],"ghsa_id":"GHSA-mvq4-39wx-6h5g","id":"tcs_01M5KFRSP94R4RS3AE3QQ47HFT","modified_at":"2026-08-04T14:40:33.239752085Z","published_at":"2026-06-08T18:31:48Z","references":["https://osv.dev/vulnerability/GHSA-mvq4-39wx-6h5g","https://nvd.nist.gov/vuln/detail/CVE-2026-11529","https://github.com/designcomputer/mysql_mcp_server/issues/89","https://github.com/designcomputer/mysql_mcp_server/pull/86","https://github.com/designcomputer/mysql_mcp_server/commit/080bef9a96d625ce0dfbde573a08b93497871981","https://github.com/designcomputer/mysql-mcp-server","https://github.com/designcomputer/mysql_mcp_server/releases/tag/v0.3.0","https://vuldb.com/cve/CVE-2026-11529","https://vuldb.com/submit/836490","https://vuldb.com/vuln/369146","https://vuldb.com/vuln/369146/cti"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-mvq4-39wx-6h5g","url":"https://osv.dev/vulnerability/GHSA-mvq4-39wx-6h5g"}],"summary":"MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler"}