stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution

GHSA-jpcj-7wfg-mqxv · CVE-2026-31040 · PYSEC-2026-3076 · 갱신 2026. 7. 14.

해야 할 일

stata-mcp: 1.13.0 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	stata-mcp	1.13.0

원문

stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution

A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-31040
WEBhttps://github.com/SepineTam/stata-mcp/issues/20
WEBhttps://github.com/SepineTam/stata-mcp/pull/21
WEBhttps://github.com/SepineTam/stata-mcp/commit/52413ce
WEBhttps://github.com/SepineTam/stata-mcp/releases/tag/v1.13.0
PACKAGEhttps://github.com/sepinetam/stata-mcp

오늘 목록으로

stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution (GHSA-jpcj-7wfg-mqxv) · Sieve