CVE-2026-61612: @aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509
The SSRF guard validateServerUrl (added for CVE-2026-33060, extended for CVE-2026-53509) validates only the hostname string and never resolves DNS. Any caller-supplied server_url whose hostname resolves to an internal address passes the guard, so the server issues requests to loopback and cloud metadata (169.254.169.254). This is a third bypass of the same guard, still present in the current latest 0.4.107, and it reaches IMDS — strictly more than CVE-2026-53509, which only reached loopback.
References
- github.com/advisories/GHSA-3xm7-qw7j-qc8v
- github.com/advisories/GHSA-798p-78g2-v556
- github.com/advisories/GHSA-g84h-j7jj-x32p
- github.com/ondata/ckan-mcp-server/commit/bb7439b553b9f965adc3d43bcd415c42eebe2f40
- github.com/ondata/ckan-mcp-server/releases/tag/v0.4.108
- github.com/ondata/ckan-mcp-server/security/advisories/GHSA-798p-78g2-v556
- nvd.nist.gov/vuln/detail/CVE-2026-61612
Code Behaviors & Features
Detect and mitigate CVE-2026-61612 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →