Issues · executeautomation/mcp-database-server · GitHub

is:issue state:open

is:issue state:open

Labels Milestones New issue

Security: SQL injection and multi-statement execution (3 critical/high findings)

#37

· piiiico opened

on May 25, 2026

[SECURITY] SQL Injection via hardcoded multipleStatements:true in MySQL adapter (GHSA-mqrg-785q-hq3m, CVSS 8.8 HIGH)

#36

· piiiico opened

on May 6, 2026

Security: SQL Injection in create_table and describe_table

#34

· 8endit opened

on Apr 6, 2026

[GHSA-65hm-pwj5-73pw] Security vulnerability detected (severity: HIGH)

#33

· knyazev741 opened

on Mar 29, 2026

Multi-Database Configuration Support

#32

· noxymon-mekari opened

on Mar 17, 2026

Regarding the SQL Server database, the judgment field can be NULL, which is inconsistent with the design

#27

· JackCmd233 opened

on Jan 24, 2026

list_tables returns null values and describe_table fails with "table does not exist" for valid tables

#23

· maMykola opened

on Nov 26, 2025

CTE disallowed as read_query limited to statements starting with SELECT

#22

· dkj opened

on Oct 29, 2025

Cannot run mcp server in Continue extension

#20

· fjodor-rybakov opened

on Oct 8, 2025

Unable to connect with the MSSQL Server

#19

· jainam-patel-qa-ak opened

on Sep 10, 2025

Postgres Host being passed as IP address to connection, generating pg_hba.conf entry not found errors

#18

· flipbit03 opened

on Sep 4, 2025

Windows authentication is not supported for MSSQL

#15

· iusk opened

on Aug 13, 2025