VYPR

Mysql Mcp Server

by Designcomputer

Source repositories

CVEs (1)

  • CVE-2026-59971criSep 11, 2026
    risk 0.52cvss epss

    ## Summary In SSE/HTTP transport mode, `mysql_mcp_server` constructs `SseServerTransport` without passing `security_settings`. As a result, the MCP Python SDK's DNS-rebinding protection (Origin/Host header validation) is disabled; the Starlette application has no CORS or…