—PyPI
PYSEC-2026-3076· CVE-2026-31040, GHSA-jpcj-7wfg-mqxvstata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution
Modified: 7/13/2026
package
PyPI/stata-mcp
pkg:pypi/stata-mcp
HIGH8.4PyPI
PYSEC-2026-3700· CVE-2026-55071, GHSA-49m4-vp58-wgc9MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
Modified: 8/19/2026
—PyPI
PYSEC-2026-544· CVE-2026-47708, GHSA-4p62-hqp5-g644MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper
Modified: 7/1/2026
HIGH8.4PyPI
GHSA-49m4-vp58-wgc9· CVE-2026-55071, PYSEC-2026-3700MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
Modified: 8/19/2026
CRITICALPyPI
GHSA-4p62-hqp5-g644· CVE-2026-47708, PYSEC-2026-544MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper
Modified: 6/29/2026
HIGHPyPI
GHSA-jpcj-7wfg-mqxv· CVE-2026-31040, PYSEC-2026-3076stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution
Modified: 7/13/2026