Database Universal MCP Server

This MCP server has critical security vulnerabilities that require immediate remediation. The most severe issue is an unvalidated external import of authentication middleware from a hardcoded user home directory path, which creates a system-wide privilege escalation risk. Additionally, the SQL query validation has bypass vulnerabilities, connection strings embed plaintext credentials in tool parameters, and the rate limiting uses in-memory storage with no persistence. The code also lacks input validation for SQL queries executed with parameterized queries in some paths but not others, creating inconsistent protection. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.