mcp-data-vis vulnerabilities

2 known vulnerabilities in mcp-data-vis from AlejandroArciniegas. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  mcp-data-vis: Server-Side Request Forgery

  CVE-2026-7146Apr 27, 2026AlejandroArciniegas

  A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Hand

• 7.3 High severity

  mcp-data-vis: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-5322Apr 2, 2026AlejandroArciniegas

  A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d. This affects the function Request of the file src/servers/database/server.js of the component MCP Handler. The