Case file No.443 · pypi · stdio

io.github.SepineTam/stata-mcp

io.github.SepineTam/stata-mcp · v1.25.2

Let LLM help you achieve your regression analysis with Stata

Package ↗GitHub ↗

Security score

88/100

Strong

Normalized over 100 points of available evidence.

Score breakdown

Known advisories32/40

0 affecting current version, 6 historical

Maintenance20/20

last push 1 days ago

Source transparency15/15

public repo, license AGPL-3.0

Metadata stability15/15

0 risky metadata change(s) without a version bump

Adoption6/10

4806 weekly downloads

Known advisories

source: OSV.dev

GHSA-49m4-vp58-wgc9HIGHfixed / historical

MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`

CVE-2026-55071 · PYSEC-2026-3700 · published Aug 12, 2026

GHSA-4p62-hqp5-g644CRITICALfixed / historical

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

CVE-2026-47708 · PYSEC-2026-544 · published Jun 4, 2026

GHSA-jpcj-7wfg-mqxvHIGHfixed / historical

stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution

CVE-2026-31040 · PYSEC-2026-3076 · published Apr 8, 2026

Metadata change timeline

rug-pull detection

First snapshot (v1.25.2)Oct 16, 2026

No changes observed yet across 1 snapshot(s).

Tool lists: not published by the registry — unknown.

FAQ

auto-generated from the data above

Is io.github.SepineTam/stata-mcp safe?

MCPWatch gives io.github.SepineTam/stata-mcp a heuristic security score of 88/100 (strong), based on 100 points of available evidence. This is an automated heuristic, not an audit.

Does io.github.SepineTam/stata-mcp have known CVEs or vulnerabilities?

OSV.dev lists 3 unique advisories for stata-mcp (CVE-2026-55071, CVE-2026-47708, CVE-2026-31040). 0 affect the current version 1.25.2.

When was io.github.SepineTam/stata-mcp last updated?

The latest registry version is 1.25.2, published Oct 15, 2026. The last push to SepineTam/stata-mcp was on Oct 19, 2026. MCPWatch last checked it on Oct 20, 2026.

What license does io.github.SepineTam/stata-mcp use?

GitHub reports the license of SepineTam/stata-mcp as AGPL-3.0.

Related servers

same publisher / similar score