labs_postgres_mcp_server vulnerabilities

CVEs whose affected-version data names the labs_postgres_mcp_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87911Critical· 9.6

2w ago

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a s…

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a s…

▾ MidnightAWS · AWS Labs postgres MCP ServerEPSS 0.99%via NVD