labs_mysql_mcp_server vulnerabilities

CVEs whose affected-version data names the labs_mysql_mcp_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85788Medium· 5.5

2w ago

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via …

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via …

▾ SunlitAWS · AWS Labs MySQL MCP ServerEPSS 0.18%via NVD