jparkerweb/mcp-sqlite

v1.0.9 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 2mo MCP Data & Storage

✓ No known CVEs patched

This release patches 1 known CVE

Topics

aitooling cursor database development equill-service mcp

+3 more

nodejs sqlite windsurf

Summary

AI summary

Fixes SQL injection vulnerability (CWE-89) in CRUD operations.

Full changelog

Fixed SQL injection vulnerability (CWE-89) in all CRUD operations and get_table_schema
Table names are now validated against sqlite_master before query construction
Column names are now validated against the target table's schema
All SQL identifiers are properly quoted with double-quote escaping

SQL injection vulnerability (CWE-89) in CRUD operations and get_table_schema fixed with table and column name validation

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track jparkerweb/mcp-sqlite

Get notified when new releases ship.

About jparkerweb/mcp-sqlite

Model Context Protocol (MCP) server that provides comprehensive SQLite database interaction capabilities