{"data":{"id":"737c3775-3a24-4a6c-8d53-f49e7658f823","title":"GHSA-3xm7-qw7j-qc8v: SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks","summary":"The @aborruso/ckan-mcp-server MCP server accepts a base_url parameter in tools such as ckan_package_search and sparql_query and sends HTTP requests to it without restriction. Exploitation needs prompt injection through malicious content while the assistant has this server connected, and a proof of concept sent 9 requests to a canary endpoint. An attacker could scan internal networks, steal cloud metadata credentials via 169.254.169.254, and attempt SQL or SPARQL injection.","solution":"Recommended fix: 1. Validate base_url against a configurable allowlist of permitted CKAN portals. 2. Block private IP ranges (RFC 1918, link-local). 3. Block cloud metadata endpoints (169.254.169.254). 4. Sanitize SQL input for datastore queries. 5. Apply a SPARQL endpoint allowlist.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3xm7-qw7j-qc8v","publishedAt":"2026-03-18T12:59:42.000Z","cveId":"CVE-2026-33060","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","denial_of_service"],"issueType":"vulnerability","affectedPackages":["@aborruso/ckan-mcp-server@< 0.4.85 (fixed: 0.4.85)"],"affectedPackageNames":["@aborruso/ckan-mcp-server"],"affectedPackageRefs":["npm:@aborruso/ckan-mcp-server"],"affectedVendors":[],"affectedVendorsRaw":["@aborruso/ckan-mcp-server","MCP server","CKAN"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00294,"epssCheckedAt":"2026-11-04T12:08:33.171Z","kevDateAdded":null,"advisoryAliases":["GHSA-3xm7-qw7j-qc8v"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-18T12:59:42.000Z","fixReleasedAt":"2026-03-16T16:12:26.355Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:39:50.128Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"@aborruso/ckan-mcp-server","fixedVersion":"0.4.85","matchedVersion":"0.4.85","fixReleasedAt":"2026-03-16T16:12:26.355Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:39:49.982Z"}]}}