All products

mysql-mcp-server

PyPI · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)CVE-2026-59971 · GHSA-RQFV-2MW9-78G2Version ranges need review. mysql-mcp-server PyPI Critical Fix reported
MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI HandlerCVE-2026-11529 · GHSA-MVQ4-39WX-6H5GVersion ranges need review. mysql-mcp-server PyPI Low Fix reported