{"id":"GHSA-g84h-j7jj-x32p","revision":"ecc57b3cf3234138a66466d51b66407e","records":[{"revision":"ecc57b3cf3234138a66466d51b66407e","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"GHSA-g84h-j7jj-x32p","aliases":["CVE-2026-53509"],"title":"@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)","description":"### Summary\nA known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a base_url parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to filter out ip addresses. However, a method to bypass exists.\n\n### Details\nCKAN MCP Server validates caller-supplied CKAN server URLs by inspecting only the parsed hostname string before issuing outbound HTTP requests. In `src/utils/http.ts`, hostname aliases such as `ip6-localhost` are not equal to `localhost`, are not dotted IPv4 literals, and are not bracketed IPv6 literals, so they pass the SSRF filter but can resolve to loopback when the server performs the request. A remote MCP caller that can invoke CKAN tools with a `server_url` can therefore make the server connect to local or private addresses and, for CKAN-shaped responses, receive response-derived data.\n\n### Fix\nReplaced the single `hostname === 'localhost'` check with a blocked-hostname `Set` covering `ip6-localhost` and `ip6-loopback`. Patched in commit `c761045a1b7c5f40d2626540dd2ef1d4feb91f8c`.\n\n---\n@aborruso/ckan-mcp-server thanks **hibrian827** for responsibly disclosing this issue.","state":0,"publishedAt":"2026-07-07T19:35:57+00:00","modifiedAt":"2026-09-23T03:56:42.740373+00:00","affected":[{"ecosystem":"npm","name":"@aborruso/ckan-mcp-server","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.4.106"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-g84h-j7jj-x32p","https://github.com/advisories/GHSA-3xm7-qw7j-qc8v","https://github.com/ondata/ckan-mcp-server","https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.106"],"sourceUrl":"https://github.com/advisories/GHSA-g84h-j7jj-x32p","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-g84h-j7jj-x32p","identifiers":["GHSA-g84h-j7jj-x32p","CVE-2026-53509"]},"retained":false,"historicalAffected":[]}],"coverage":[]}