CVE-2026-76894

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through postMessage with a wildcard target origin. A frame that...

CVE-2026-76894

The CKAN MCP Server (prior to version 0.4.112 ) contains a vulnerability in the DataStore table UI resource (src/resources/datastore-table-ui.ts). The component fails to validate the event.origin of inbound postMessage events and uses a wildcard * for outbound targetOrigin. This allows a frame ca...

CVE-2026-76894 CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through postMessage with a wildcard target origin. A frame that...

RockyLinux 8 : openssh (RLSA-2019:3702)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:3702 advisory. openssh: scp client improper directory name validation CVE-2018-20685 openssh: Improper validation of object names allows malicious server to overwrite...

CLSA-2026-1784623076 thunderbird: Fix of CVE-2025-14327

CVE-2025-14327: fix URI host display spoofing by consolidating DownloadUtils.getURIHost into BrowserUtils.formatURIForDisplay Mozilla bug 1970743...