npm

@aborruso/ckan-mcp-server

5 Total advisories

5 Vulnerabilities

0 Malware

Dependency scanning

Check whether @aborruso/ckan-mcp-server is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

MEDIUM 5.7

npm

CVE-2026-53509

@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)

Jul 7, 2026

MEDIUM 6.5

npm

CVE-2026-73846

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

Sep 3, 2026

LOW 3.7

npm

CVE-2026-73844

CKAN MCP Server: Information disclosure via verbose error reflection

Sep 3, 2026

MEDIUM 5.3

npm

CVE-2026-73845

CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

Sep 2, 2026

MEDIUM 5.7

npm

CVE-2026-33060

SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks

Mar 18, 2026

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes