We provide security fixes for the latest released minor version only. Always run the most recent release (see releases) or build from main if you need an unreleased fix.

Please do not open a public issue for security problems.

This repository has GitHub Private Vulnerability Reporting enabled (see issue #81). Report privately via:

Security tab → Report a vulnerability

https://github.com/FreePeak/db-mcp-server/security/advisories/new

Please include:

• A clear description of the issue and its impact
• The affected version(s) and configuration (e.g. database driver, deployment)
• Step-by-step instructions or a proof of concept to reproduce it
• A suggested fix, if you have one

Maintainers will acknowledge your report and respond within a reasonable timeframe. We will work with you to understand the issue, coordinate a fix, and credit you in the disclosure unless you prefer to remain anonymous.

Thank you for helping keep db-mcp-server and its users safe.