{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.0"}],"component":"adx-mcp-server","cve_ids":["CVE-2026-33980"],"ecosystem":"PyPI","epss":0.00403,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vphc-468g-8rfp","id":"tcs_01M5KGYT13P44BJPKV9HCGM4PC","modified_at":"2026-07-13T16:31:37.757999013Z","published_at":"2026-07-13T14:36:45.388458Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2327","https://github.com/pab1it0/adx-mcp-server/security/advisories/GHSA-vphc-468g-8rfp","https://nvd.nist.gov/vuln/detail/CVE-2026-33980","https://github.com/pab1it0/adx-mcp-server/commit/0abe0ee55279e111281076393e5e966335fffd30","https://github.com/pab1it0/adx-mcp-server","https://pypi.org/project/adx-mcp-server","https://github.com/advisories/GHSA-vphc-468g-8rfp"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-2327","url":"https://osv.dev/vulnerability/PYSEC-2026-2327"}],"summary":"Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries"}