LOW 3.1 GitHub
CVE-2026-76894
ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
## Summary
The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates with its parent via `postMessage`. Its inbound `message` listener performs no `event.origin` validation, and its outbound messages are sent with target origin `'*'`. Any window/frame able to reach the document can inject data into the table and interfere with the MCP UI handshake, and the UI's own JSON-RPC messages are broadcast without an origin restriction.
## Affected code
Affected Products
- npm/@aborruso/ckan-mcp-server < 0.4.112
References
- https://github.com/advisories/GHSA-vqff-r82h-9crc
- https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-vqff-r82h-9crc
- https://github.com/advisories/GHSA-vqff-r82h-9crc
This low severity vulnerability with a CVSS score of 3.1 was published on 2026-10-16 via GitHub. Affected: npm/@aborruso/ckan-mcp-server < 0.4.112.
vulnfeed aggregates 16467 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.