ondata has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 5.7 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 5.7
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-918 1

Products

ckan-mcp-server 1

Follow ondata:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-61612Medium· 5.7@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-5350931

ondata vulnerabilities

CVEs affecting ondata, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-61612Medium· 5.7

@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended for CVE-2026-53509) validates only the hostname string and never resolves DNS…

▾ Sunlitondata · ckan-mcp-servervia CVEORG

ondata vulnerabilities (CVEs) · VulnSea