CVE-2026-76894 | ckan-mcp-server DataStore datastore-table-ui.ts addEventListener cross-domain policy

October 19, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in ckan-mcp-server. Affected is the function addEventListener of the file src/resources/datastore-table-ui.ts of the component DataStore. This manipulation causes permissive cross-domain policy with untrusted domains.

This vulnerability is handled as CVE-2026-76894. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More