Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3700
  • PyPI/stata-mcp
 MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install` 19 Aug
  • Fix available
  • Severity - 8.4 (High)
GHSA-49m4-vp58-wgc9
  • PyPI/stata-mcp
 MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install` 12 Aug
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-3076
  • PyPI/stata-mcp
 stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution 13 Jul
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-544
  • PyPI/stata-mcp
 MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper 29 Jun
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-4p62-hqp5-g644
  • PyPI/stata-mcp
 MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper 04 Jun
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-jpcj-7wfg-mqxv
  • PyPI/stata-mcp
 stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution 08 Apr
  • Fix available
  • Severity - 8.7 (High)