{"id":"ghsa-ghsa-vqff-r82h-9crc","seq":2456,"kind":"advisory","title":"ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin \"*\" (out)","url":"https://github.com/advisories/GHSA-vqff-r82h-9crc","permalink":"https://vulnpulse.app/items/ghsa-ghsa-vqff-r82h-9crc","summary":"影響: npm:@aborruso/ckan-mcp-server < 0.4.112 → 0.4.112\nSummary The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''. Any window/frame able to reach the document can inject data into the table and interfere with the MCP UI handshake, and the UI's own JSON-RPC messages are broadcast without an origin restriction. Affected code src/resources/d…","severity":"low","techs":["nodejs"],"cves":["CVE-2026-76894"],"tags":["GHSA-vqff-r82h-9crc","@aborruso/ckan-mcp-server"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-16T19:23:48.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}