Skip to content
OpenAdvisories

Package · PyPI

mysql-mcp-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 10.0
    CVE-2026-59971

    MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

    MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/server.py to construct SseServerTransport without security_settings or enable_dns_r…

    designcomputer mysql_mcp_server mysql-mcp-server PyPI
  • Medium 6.3
    CVE-2026-11529

    designcomputer mysql-mcp-server mysql URI server.py read_resource sql injection

    A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes s…

    designcomputer mysql_mcp_server mysql-mcp-server PyPI