Zetlyn
GitHubGet started

product of apache

doris mcp server

2 thingsrelated by NVD
Severity
high 1 medium 1

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly…
CVE-2025-66336
Severity high
Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may…
CVE-2025-66335
Severity medium