All vulnerabilities

GHSA-vc99-47x2-wx2v

dbmcp: unauthenticated HTTP MCP transport lets a network peer read and write the connected database

highCVSS 7.1CWE-306

Vendor

haymon-ai

Package

dbmcp cargo

Affected

<= 0.13.2

Fixed in

0.14.0

Disclosed

2026-10-22

Credit

Avishai Gonen

auth-bypasshost-headerdatabasemcp

Published advisory