[ Vendor · 1 CVEs ]
ondata
CVEs affecting ondata published in the last 30 days, plus any ondata CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-61612 | 21 Sep 2026 | CVSS 5.7 | @aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for… | Fix |