https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T12:19:07.041970+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291984 EUVD-2026-291984 2026-10-12T12:19:07.044434+00:00 EUVD-2026-291984 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66335 fkie_cve-2025-66335 2026-10-12T12:19:07.044460+00:00

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version 0.6.1 and later are not affected.

 https://cve.radiocsirt.org/vuln/ghsa-qhfq-gvvc-5q6q GHSA-qhfq-gvvc-5q6q — Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization 2026-10-12T12:19:07.044488+00:00

Affected: PyPI: doris-mcp-server

Apache Doris MCP Server versions prior to 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Versions 0.6.1 and later are not affected.

 https://cve.radiocsirt.org/vuln/pysec-2026-2459 PYSEC-2026-2459 — Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization 2026-10-12T12:19:07.044511+00:00

Affected: PyPI: doris-mcp-server

Apache Doris MCP Server versions prior to 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Versions 0.6.1 and later are not affected.