Attributed metadata history
Up to 100 retained publisher events per page for b8104b3e8afe6c75cfa0187c531d97d4cd0a7a6324af33af4c84ce050d4fbb17. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_b35573840dfc5ce6da
observed · 2026-10-12 14:29:02 UTC
available
Fingerprint: 596c214e60f67af37a9e8175e4f5cd1a8ccaa6da5d5c0b2911f426d14b9208a6
intelligence_src_b35573840dfc5ce6da
observed · 2026-10-12 14:29:02 UTC
Bulletin ID: 2026-101-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/04/2026 13:00 PM PDT Description: We have identified CVE-2026-85787, an incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user interacts with the MCP server. Impacted versions: any pypi package version < 1.1.7 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Fingerprint: 164a45b83d168d79ea26f169d531ff42ad3a0e55c4e4d565b4c25f21c51fc806