Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4109
  • PyPI/mysql-mcp-server
 MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure) 01 Oct
  • Fix available
  • Severity - 10.0 (Critical)
GHSA-rqfv-2mw9-78g2
  • PyPI/mysql-mcp-server
 MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure) 11 Sep
  • Fix available
  • Severity - 10.0 (Critical)
PYSEC-2026-3579
  • PyPI/mysql-mcp-server
 MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler 04 Aug
  • Fix available
  • Severity - 2.1 (Low)
GHSA-mvq4-39wx-6h5g
  • PyPI/mysql-mcp-server
 MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler 08 Jun
  • Fix available
  • Severity - 2.1 (Low)