CKAN MCP Server
CKAN MCP Server 0.4.108 Addresses an SSRF Validation Bypass
09/22/2026
CKAN MCP Server can reach internal services through attacker-controlled DNS names. The advisory lists 0.4.108 as patched; update self-hosted deployments and restrict allowed destinations without treating the version claim as independently tested containment.