Ondata

6 CVEs across 2 Ondata products. Browse Ondata vulnerabilities, severities, and proof-of-concept exploits.

Ondata products with known CVEs

ProductCVEs
Ckan-Mcp-Server6
Ckan Mcp Server1
Ondata CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61612Medium5.72026-09-21CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended…
CVE-2026-53509Medium5.72026-08-21CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_qu…
CVE-2026-73846Medium6.52026-08-14CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with un…
CVE-2026-73845Medium5.32026-08-14CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/q…
CVE-2026-73844Low3.72026-08-14CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messag…
CVE-2026-33060Medium5.32026-03-20CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckan_package_search and sparql_query that accep…