Skip to content

Release history

jparkerweb/mcp-sqlite releases

Model Context Protocol (MCP) server that provides comprehensive SQLite database interaction capabilities

All releases

3 shown

1.0.9 Security relevant
Security fixes
  • SQL injection vulnerability (CWE-89) in CRUD operations and get_table_schema fixed with table and column name validation
Full changelog

What's New 🎉

[1.0.9] - 2026-04-04

🛡️ Security

  • Fixed SQL injection vulnerability (CWE-89) in all CRUD operations and get_table_schema
  • Table names are now validated against sqlite_master before query construction
  • Column names are now validated against the target table's schema
  • All SQL identifiers are properly quoted with double-quote escaping
1.0.8 Bugfix

Minor fixes and improvements.

Full changelog

What's New 🎉

[1.0.8] - 2026-03-14

🐛 Fixed

  • Fixed Zod v4 compatibility by using explicit string keys
1.0.7 New feature
Notable features
  • Tool description parameters for Agent selection
Full changelog

[1.0.7] - 2025-06-02

📦 Updated

  • Added a "description" parameter to each tool definitions for better Agent selection

🐛 Fixed

  • Resolved a know validation issue with VS Code that requires stricter JSON schema validation

Beta — feedback welcome: [email protected]