https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 08:24:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252803 EUVD-2026-252803 https://cve.radiocsirt.org/vuln/euvd-2026-252803 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59333 <p>The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to properly enforce a &#34;read-only&#34; mode. This vulnerability affects only the npm distribution; other distributions are not impacted. As a result, the server is susceptible to abuse and attacks on affected database systems such as PostgreSQL, and potentially others that expose elevated functionalities. These attacks may lead to denial of service and other unexpected behaviors.</p> <p>The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to properly enforce a &#34;read-only&#34; mode. This vulnerability affects only the npm distribution; other distributions are not impacted. As a result, the server is susceptible to abuse and attacks on affected database systems such as PostgreSQL, and potentially others that expose elevated functionalities. These attacks may lead to denial of service and other unexpected behaviors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-59333 https://cve.radiocsirt.org/vuln/ghsa-65hm-pwj5-73pw <p><strong>Affected:</strong> npm: @executeautomation/database-server</p> <p>The MCP Server provided by ExecuteAutomation at https://github.com/executeautomation/mcp-database-server provides an MCP interface for agentic workflows to interact with different kinds of database servers such as PostgreSQL database. However, the `mcp-database-server` MCP Server distributed via the npm package `@executeautomation/database-server` fails to implement proper security control that properly enforce a &#34;read-only&#34; mode and as such it is vulnerable to abuse and attacks on the affected database servers such as PostgreSQL (and potentially other db servers that expose elevated functionalities) and which may result in denial of service and other unexpected behavior.</p> <p>This MCP Server is also publicly published in the npm registry: https://www.npmjs.com/package/@executeautomation/database-server</p> <p>## Vulnerable code</p> <p>The vulnerable code to SQL injection takes shape in several ways: - `startsWith(&#34;SELECT&#34;)` can include multiple queries because the pg driver for the `client.query()` supports multi queries if terminated with a `;` - `startsWith(&#34;SELECT&#34;)` can include denial of service queries for stored procedures and other internal db functions</p> <p>The tool call [here in index.ts](https://github.com/executeautomation/mcp-database-server/blob/d6afa4be08eb05343195635fa9462746a6be3a59/index.ts#L272C1-L291C6) is vulnerable:</p> <p>``` // Handle tool calls server.setRequestHandler(CallToolRequestSchema, async (request) =&gt; { switch (request.params.name) { case &#34;read_query&#34;: {…</p> <p><strong>Affected:</strong> npm: @executeautomation/database-server</p> <p>The MCP Server provided by ExecuteAutomation at https://github.com/executeautomation/mcp-database-server provides an MCP interface for agentic workflows to interact with different kinds of database servers such as PostgreSQL database. However, the `mcp-database-server` MCP Server distributed via the npm package `@executeautomation/database-server` fails to implement proper security control that properly enforce a &#34;read-only&#34; mode and as such it is vulnerable to abuse and attacks on the affected database servers such as PostgreSQL (and potentially other db servers that expose elevated functionalities) and which may result in denial of service and other unexpected behavior.</p> <p>This MCP Server is also publicly published in the npm registry: https://www.npmjs.com/package/@executeautomation/database-server</p> <p>## Vulnerable code</p> <p>The vulnerable code to SQL injection takes shape in several ways: - `startsWith(&#34;SELECT&#34;)` can include multiple queries because the pg driver for the `client.query()` supports multi queries if terminated with a `;` - `startsWith(&#34;SELECT&#34;)` can include denial of service queries for stored procedures and other internal db functions</p> <p>The tool call [here in index.ts](https://github.com/executeautomation/mcp-database-server/blob/d6afa4be08eb05343195635fa9462746a6be3a59/index.ts#L272C1-L291C6) is vulnerable:</p> <p>``` // Handle tool calls server.setRequestHandler(CallToolRequestSchema, async (request) =&gt; { switch (request.params.name) { case &#34;read_query&#34;: {…</p> https://cve.radiocsirt.org/vuln/ghsa-65hm-pwj5-73pw