https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:04:39.629449+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325555 EUVD-2026-325555 2026-10-04T23:04:39.709259+00:00 EUVD-2026-325555 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11529 fkie_cve-2026-11529 2026-10-04T23:04:39.709297+00:00

A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.3.0 is sufficient to resolve this issue. Patch name: 080bef9a96d625ce0dfbde573a08b93497871981. Upgrading the affected component is advised.

 https://cve.radiocsirt.org/vuln/ghsa-mvq4-39wx-6h5g GHSA-mvq4-39wx-6h5g — MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler 2026-10-04T23:04:39.709332+00:00

Affected: PyPI: mysql-mcp-server

A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.3.0 is sufficient to resolve this issue. Patch name: 080bef9a96d625ce0dfbde573a08b93497871981. Upgrading the affected component is advised.

 https://cve.radiocsirt.org/vuln/pysec-2026-3579 PYSEC-2026-3579 — MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler 2026-10-04T23:04:39.709359+00:00

Affected: PyPI: mysql-mcp-server

A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.3.0 is sufficient to resolve this issue. Patch name: 080bef9a96d625ce0dfbde573a08b93497871981. Upgrading the affected component is advised.