io.github.SepineTam/stata-mcp
Let LLM help you achieve your regression analysis with Stata
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.SepineTam/stata-mcp
· Source code
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-49m4-vp58-wgc9MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`Also filed as CVE-2026-55071, PYSEC-2026-3700 | high | Not flagged | Aug 12, 2026 |
| GHSA-4p62-hqp5-g644MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapperAlso filed as CVE-2026-47708, PYSEC-2026-544 | critical | Not flagged | Jun 4, 2026 |
| GHSA-jpcj-7wfg-mqxvstata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command executionAlso filed as CVE-2026-31040, PYSEC-2026-3076 | high | Not flagged | Apr 8, 2026 |
Versions in the registry
1.25.3 (listed), 1.25.2, 1.25.1, 1.25.0, 1.23.1 (package 1.13.38), 1.23.0 (package 1.13.38), 1.22.0 (package 1.13.38), 1.21.4 (package 1.13.38), 1.21.3 (package 1.13.38), 1.21.2 (package 1.13.38), 1.21.1 (package 1.13.38), 1.21.0 (package 1.13.38), 1.20.2 (package 1.13.38), 1.20.1 (package 1.13.38), 1.20.0 (package 1.13.38), 1.19.0 (package 1.13.38), 1.18.2 (package 1.13.38), 1.18.1 (package 1.13.38), 1.18.0 (package 1.13.38), 1.17.3 (package 1.13.38), 1.17.2 (package 1.13.38), 1.17.1 (package 1.13.38), 1.17.0 (package 1.13.38), 1.16.3 (package 1.13.38), 1.16.2 (package 1.13.38), 1.16.1 (package 1.13.38), 1.16.0 (package 1.13.38), 1.15.1 (package 1.13.38), 1.15.0 (package 1.13.38), 1.14.3 (package 1.13.38) and 6 older