Skip to content
OpenAdvisories

Vendor

ondata

7 known vulnerabilities.

Products

ckan-mcp-server 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-76894

    CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

    CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through postMessage with a…

    ondata ckan-mcp-server @aborruso/ckan-mcp-server npm
  • Low 3.7
    CVE-2026-73844

    CKAN MCP Server: Information disclosure via verbose error reflection

    CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at (or red…

    ondata ckan-mcp-server @aborruso/ckan-mcp-server npm