stata-mcp
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install` | stata-mcp | PyPI | High | Fix reported | |
| stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution | stata-mcp | PyPI | High | Fix reported | |
| MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper | stata-mcp | PyPI | Critical | Fix reported |