pgedge-postgres-mcp vulnerabilities

2 known vulnerabilities in pgedge-postgres-mcp from pgEdge. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  pgedge-postgres-mcp: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-126197Nov 12, 2026pgEdge

  pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An ar

• 8.1 High severity

  pgedge-postgres-mcp: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-126196Nov 12, 2026pgEdge

  pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, query_database on a read_only connection could send unrecognized statements through pgx Exec without bind parameters,