VYPR

stata-mcp

by SepineTam

pypi: stata-mcp

Source repositories

CVEs (2)

  • CVE-2026-47708CriJul 21, 2026
    risk 0.53cvss —epss 0.00

    MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the `log_file_name` parameter in the `stata_do` API and CLI is directly interpolated into a Stata command string without sanitization. The security guard (`GuardValidator`) only…

  • CVE-2026-55071HigSep 21, 2026
    risk 0.48cvss 8.4epss 0.00

    MCP-for-Stata is a MCP server for integrating Stata into agent loops with a safety-first design. Prior to version 1.19.0, the ado_package_install MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization.…