designcomputer mysql-mcp-server

• CVE-2026-59971 Critical 10.0 MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure) 0.4%
• CVE-2026-11529 Medium 6.3 designcomputer mysql-mcp-server mysql URI server.py read_resource sql injection 0.2%