Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

doris-mcp-server

3 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 2 medium
Weekly downloads
188
Dependents
0
Registry
PyPI

Advisories 3

  • Apache Doris MCP Server: SQL injection leading the authentication bypass

    Affected: from 0.1.0, fixed in 0.6.1; fixed in 0.6.1.

  • CVE-2025-66335Medium 5.3

    Apache Doris MCP Server: MCP SQL inject

    Affected: from 0.1.0, fixed in 0.6.1.

  • CVE-2025-58337Medium 5.4

    Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode for doris-mcp-server MCP Server

    Affected: fixed in 0.6.0.