CKAN MCP Server v0.4.112 Patch: Fixes for SSRF, DoS, Prompt Injection, and HTTP Transport Vulnerabilities

Vulnerability Overview v0.4.112 - Security Hardening (SSRF, DoS, Prompt Injection, Caching, Transport) - This version implements security hardening against multiple vulnerabilities, including SSRF, DoS, prompt injection, caching, and transport issues. Impact Scope SSRF - Affected paths: , - The new function disables blind redirection and re-validates internal IPs on every redirect. - now fails on DNS errors, preventing redirection to metadata endpoints (e.g., ). - Source port probing in is now optional (disabled by default); non-default ports are dropped, and fan-out outputs are limited. Denial of Service - Decompression bombs/unbounded buffers: Response size and decompressed output are now limited (defaults: 32 MB / 64 MB, overridable via and ). HTTP Transport - Default binding to (public binding via ); DNS redirect protection is enforced through , , and publishing on the loopback interface. Content/Integrity - Indirect prompt injection isolation: Portal free text (dataset/resource/organization/group descriptions) is wrapped in delimited untrusted content blocks; portal URLs are scheme-validated and rendered in inline code. - MQA host whitelist: Precise host verification (fixing suffix/username bypasses). - Cache key normalization: Typed, injection-resistant keys (conflicts between different parameter sets no longer occur). - Error handling: Upstream bodies and internal exception text are no longer reflected to callers. - DataStore table UI: sources are pinned to the host and validated. Remediation SSRF - Disable blind redirection and re-validate internal IPs using . - fails on DNS errors. - Source port probing in is now optional. Denial of Service - Limit response size and decompressed output (defaults: 32 MB / 64 MB). HTTP Transport - Default binding to ; DNS redirect protection enforced via , , and publishing on the loopback interface. Content/Integrity - Wrap portal free text in delimited untrusted content blocks. - Implement precise host verification. - Apply typed, injection-resistant key protection. - Stop reflecting upstream bodies and internal exception text to callers. - Pin and validate sources to the host. New Environment Variables Contributors Reporters: @Gal3m and @mrostamipoor Full Changelog v0.4.109...v0.4.112 Contributors mrostamipoor and Gal3m Assets No specific asset information. Summary v0.4.112 hardens against multiple security vulnerabilities, including SSRF, DoS, prompt injection, caching, and transport issues. Remediation measures include disabling blind redirection, limiting response sizes, binding to the default IP, wrapping portal free text, implementing precise host verification, and applying typed injection-resistant key protection. New environment variables include , , , , and .

Goal Reached Thanks to every supporter — we hit 100%!

CKAN MCP Server v0.4.112 Patch: Fixes for SSRF, DoS, Prompt Injection, and HTTP Transport Vulnerabilities

More from this source