Apache Doris Mcp Server (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-22. Vendor: Apache Software Foundation.

CVEs of Apache Doris Mcp Server

• CVE-2025-66336 - CVSS 8.1 (high), 2026-06-22: Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL…
• CVE-2025-66335 - CVSS 5.3 (medium), 2026-04-20: Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of…