41,554 blogs · 4,981,167 posts Claim your blog

Record · corpus.blog/posts/01a087b1-0f46-723a-8f96-52fc5e9e97d7

SQL Injection and Bypassing "Read-Only" Mode in Xata's MCP Server

nodejs-security.com · published 13 September 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at nodejs-security.com Wayback capture

1blogs citing

First cited: 5 Oct 2025
Most recent: 5 Oct 2025
Rank this month: not ranked
External links: 6
Words captured: 1,062

Cited by

Blog

In the post

Date

Evaluation Framework for MCP Security Threats and Risks Read at the source ↗

5 Oct 2025

Links from this post

Link

Host

https://github.com/xataio/agent

github.com

https://github.com/xataio/agent/security/advisories/GHSA-w22h-m48w-8jgw

github.com

https://github.com/xataio/agent/commit/30aecbcf95390594fbef3a2ab5504118982e4e7e

github.com

https://github.com/advisories/GHSA-6jx8-rcjx-vmwf

github.com

https://twitter.com/liran_tal

twitter.com

https://github.com/lirantal

github.com

Elsewhere on nodejs-security.com (3)

How to Mitigate SQL Bypass in MCP Servers Read at the source ↗

nodejs-security.com

https://www.nodejs-security.com/book/command-injection

nodejs-security.com

How to Bypass Access Control in PostgreSQL in Simple PSQL MCP Server for SQL Injection Read at the source ↗

nodejs-security.com