{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.0"}],"component":"adx-mcp-server","cve_ids":["CVE-2026-33980"],"ecosystem":"PyPI","epss":0.00403,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vphc-468g-8rfp","id":"tcs_01M5KG0HP09X2V26KK6CQ1Z5RS","modified_at":"2026-07-13T16:43:43.352646701Z","published_at":"2026-03-27T19:08:09Z","references":["https://osv.dev/vulnerability/GHSA-vphc-468g-8rfp","https://github.com/pab1it0/adx-mcp-server/security/advisories/GHSA-vphc-468g-8rfp","https://nvd.nist.gov/vuln/detail/CVE-2026-33980","https://github.com/pab1it0/adx-mcp-server/commit/0abe0ee55279e111281076393e5e966335fffd30","https://github.com/pab1it0/adx-mcp-server"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-vphc-468g-8rfp","url":"https://osv.dev/vulnerability/GHSA-vphc-468g-8rfp"}],"summary":"Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries"}