Threats affecting pkg:github/tabularisdb/tabularis

Tabularis versions before 0.28.0 have an SQL injection vulnerability in the SQLite driver. This flaw allows malicious clients to execute multiple SQL statements by manipulating the table_name parameter in the describe_table tool. Exploitation can bypass read-only restrictions and write approvals, enabling unauthorized reading, modification, or deletion of SQLite data. The vulnerability is fixed in version 0.28.0.

TabularisDB's tabularis version 0.27.0 and earlier contains an incorrect authorization vulnerability in the MCP run_query safety gate. This flaw allows untrusted or prompt-injected agents to bypass read-only mode by submitting side-effecting SELECT statements, enabling unauthorized data modification. Attackers can exploit this to run PostgreSQL functions like setval, nextval, or query_to_xml with embedded DELETE commands without approval prompts.