CVEvulnerability

CVE-2026-76894

3.1 LOW Published 2026-11-03 Modified 2026-11-03 Official page ↗

Exploitation and prioritisation

EU Vulnerability Database
EUVD-2026-116490

Affected packages

EcosystemPackageVulnerableFixed inAdvisory
npm@aborruso/ckan-mcp-server< 0.4.1120.4.112GHSA-vqff-r82h-9crc
Status
Received
Published
2026-11-03
Last modified
2026-11-03
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.1 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Weaknesses
CWE-345, CWE-940

Description

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through postMessage with a wildcard target origin. A frame that can reach the embedded document can inject fabricated fields or records, spoof pending ui/initialize responses, disrupt the MCP UI handshake, or receive outbound messages when the resource is embedded by an untrusted parent. Values are HTML escaped, so the demonstrated content injection is display spoofing rather than script execution, and exploitability depends on the host embedding model. This issue is fixed in version 0.4.112.

Related

Weakness · CWE (2)

  • CWE-345 Insufficient Verification of Data Authenticity weakness
  • CWE-940 Improper Verification of Source of a Communication Channel weakness

Referenced by GitHub Advisory · alias (1)

  • GHSA-vqff-r82h-9crc ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out) advisory · npm

References